PT-2026-25917 · Jetkvm · Jetkvm
CVSS v4.0
9.3
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
JetKVM versions prior to 0.5.4
Description
The software does not limit the rate of login requests, which allows for brute-force attempts to guess credentials. This impacts KVM-over-IP devices lacking brute-force protection.
Recommendations
Update JetKVM to version 0.5.4 or later.
Exploit
Fix
Improper Restriction of Excessive Authentication Attempts
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Jetkvm