BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-02-02

Assigner: ICS-CERT

Description

This vulnerability arises because there are no limitations on the number of authentication attempts a user can make. An attacker can exploit this weakness by continuously sending authentication requests, leading to a denial-of-service (DoS) condition. This can overwhelm the authentication system, rendering it unavailable to legitimate users and potentially causing service disruption. This can also allow attackers to conduct brute-force attacks to gain unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-02-02

Generated

2026-07-06

AI Q&A

2026-01-23

EPSS Evaluated

2026-07-05

NVD

CVE-2025-53968

Affected Vendors & Products

Vendor	Product	Version / Range
evmapa	evmapa	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-307	The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

Attack-Flow Graph

Executive Summary

This vulnerability occurs because there is no limit on the number of authentication attempts a user can make. An attacker can exploit this by repeatedly sending authentication requests, which can overwhelm the authentication system and cause a denial-of-service (DoS) condition. This makes the system unavailable to legitimate users and may also enable brute-force attacks to gain unauthorized access.

Impact Analysis

The vulnerability can impact you by causing a denial-of-service condition that makes the authentication system unavailable to legitimate users, disrupting service. Additionally, it can allow attackers to perform brute-force attacks to gain unauthorized access, potentially compromising system security.

Hi! I’m here to help you understand CVE-2025-53968. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70