CVE-2024-4601

Name of the Vulnerable Software and Affected Versions Socomec Net Vision version 7.20

Description An incorrect authentication issue has been found, allowing an attacker to perform a brute force attack on the application and recover a valid session. This is possible because the application uses a five-digit integer value for authentication.

Recommendations For Socomec Net Vision version 7.20, consider implementing additional authentication measures to prevent brute force attacks, such as account lockout policies or two-factor authentication, until a patch is available.