PT-2025-32370 · Unknown · Registered Product

Anthony Rose · Published 2025-08-08 · Updated 2025-08-13 · CVE-2025-46414

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions versions prior to April 6, 2025

Description The product does not limit the number of attempts for entering the correct PIN for a registered product, potentially allowing an attacker to gain unauthorized access using brute-force methods if they have a valid device serial number. The API provides feedback upon successful PIN entry.

Recommendations Update the product to the version released on or after April 6, 2025.

Fix

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2025-46414

Affected Products

Registered Product

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-46414 · Security Note
• https://twitter.com/CVEnew/status/1953860637916115091 · Twitter Post
• https://twitter.com/CveFindCom/status/1953858919832469705 · Twitter Post
• https://twitter.com/cracbot/status/1955585196318761024 · Twitter Post
• https://t.me/CVEtracker/29513 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-25-219-07 · Note
• https://eg4electronics.com/contact · Note