CVE-2024-3461

MEDIUM

KioWare for Windows <= 8.35 - Unauthenticated PIN Brute Force

Title source: llm
STIX 2.1

Description

KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechanisms preventing a user from excessively guessing the number.

References (3)

Core 3
Core References
Broken Link, Third Party Advisory third-party-advisory
https://cert.pl/posts/2024/04/CVE-2024-3459
Broken Link, Third Party Advisory third-party-advisory
https://cert.pl/en/posts/2024/04/CVE-2024-3459
Product product
https://www.kioware.com/

Scores

CVSS v3 6.2
EPSS 0.0026
EPSS Percentile 16.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-307
Status published
Products (1)
kioware/kioware < 8.35
Published May 14, 2024
Tracked Since Feb 18, 2026