CVE-2025-27456
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-07-03

Last updated on: 2026-02-06

Assigner: SICK AG

Description
The SMB server's login mechanism does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-07-03
Last Modified
2026-02-06
Generated
2026-05-07
AI Q&A
2025-07-03
EPSS Evaluated
2026-05-05
NVD
CVE-2025-27456
EUVD
EUVD-2025-19872
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
endress meac300-fnade4_firmware *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-307 The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists because the SMB server's login mechanism does not have adequate protections to stop multiple failed login attempts in a short period. This lack of protection allows attackers to perform brute-force attacks, trying many passwords rapidly to gain unauthorized access.


How can this vulnerability impact me? :

The vulnerability can lead to unauthorized access if an attacker successfully guesses a valid password through brute-force attempts. This compromises the confidentiality of the system, potentially exposing sensitive data without affecting integrity or availability.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart