critical9.8
CVE-2024-47088
This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login.
Impact
This vulnerability exists in Apex Softcell LD Geo due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack on login OTP, which could lead to gain unauthorized access to other user accounts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apexsoftcell | Ld Geo | before 4.0.0.7 |
| Apexsoftcell | Ld Dp Back Office | before 24.8.21.1 |