CVE-2024-51558 - WPS Office Wave Brute Force Authentication Bypass

CVE ID : CVE-2024-51558
Published : Nov. 4, 2024, 1:17 p.m. | 22 minutes ago
Description : This vulnerability exists in the Wave 2.0 due to missing restrictions for excessive failed authentication attempts on its API based login. A remote attacker could exploit this vulnerability by conducting a brute force attack against legitimate user OTP, MPIN or password, which could lead to gain unauthorized access and compromise other user accounts.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...