Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-47088 EUVD-2024-42271GHSA-6f83-4pfw-m3vj

User Enumeration vulnerability

Published Sep 19, 2024 · Updated Sep 19, 2024 · Assigned by CERT-In

Description

This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.

Affected products

VendorProductAffectedFixed
Apex Softcell LD Geo <4.0.0.7 —

References