CVE-2025-4319

Katalog CVE

CVSS 9.4 · Critical EPSS 0,41%

Kerentanan Improper Restriction of Excessive Authentication Attempts. Skor CVSS 3.1 9.4 (Critical) menurut usom.gov.tr.

Deskripsi (NVD)

Improper Restriction of Excessive Authentication Attempts, Weak Password Recovery Mechanism for Forgotten Password vulnerability in Birebirsoft Software and Technology Solutions Sufirmam allows Brute Force, Password Recovery Exploitation. This issue affects Sufirmam: through 23012026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Rincian

Terbit di NVD

23 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

9.4 (Critical), sumber usom.gov.tr
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-307: Improper Restriction of Excessive Authentication Attempts
CWE-640: Weak Password Recovery Mechanism for Forgotten Password

EPSS (30 hari)

0,41% peluang dieksploitasi; lebih tinggi dari 33,5% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0005
• https://www.usom.gov.tr/bildirim/tr-26-0005