CVE-2025-49186: No brute-force protection
The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it susceptible to brute-force attacks.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49186?
CVE-2025-49186 is considered a high-severity vulnerability due to its potential to allow unauthorized access through brute-force attacks.
How do I fix CVE-2025-49186?
To fix CVE-2025-49186, implement rate limiting on authentication attempts and enforce account lockout policies after a specified number of failed attempts.
What systems are affected by CVE-2025-49186?
CVE-2025-49186 affects various systems, including Avaya Media Server and multiple SICK analytics products.
What type of attack does CVE-2025-49186 allow?
CVE-2025-49186 allows attackers to perform brute-force attacks due to the lack of sufficient protections against multiple failed authentication attempts.
Why is brute-force protection important in CVE-2025-49186?
Brute-force protection is critical in CVE-2025-49186 as it prevents unauthorized access by limiting the number of login attempts, thus securing user accounts.