What’s Vulnerable › Vulnerabilities

CVE-2025-0417: Valmet DNA Lack of protection against brute force attacks

• Severity: high (CVSS 7.0 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-04-01 · updated 2026-06-17
• Weakness: CWE-307

Description

Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations.

Affected products

• Valmet DNA: from C2007 through C2024

References

• https://www.valmet.com/about-us/about/research-and-development/vulnerabilityadvisories/cve-2025-0417/

Get alerted when CVE-2025-0417 or the next vulnerability affects your stack