Impact Analysis

This vulnerability can impact users by allowing attackers to perform excessive authentication attempts remotely without proper restriction. This could potentially lead to unauthorized access if the attacker is able to guess or brute-force authentication credentials.

However, the exploitability is considered difficult, which may reduce the likelihood of successful attacks. Still, the public disclosure of the exploit increases the risk that attackers may attempt to exploit this vulnerability.

Useful 0 Not Useful 0

Executive Summary

This vulnerability exists in the CodeWise Tornet Scooter Mobile App version 4.75 on iOS and Android platforms. It involves an unknown function within the file /TwoFactor that improperly restricts excessive authentication attempts. This means that the app does not adequately limit the number of times an attacker can try to authenticate, potentially allowing repeated attempts.

The attack exploiting this vulnerability can be performed remotely, but it is considered highly complex and difficult to exploit. Despite this, the exploit has been publicly disclosed and may be used by attackers.

The vendor was informed early about this issue but did not respond.

Useful 0 Not Useful 0