CVE-2025-30235

—

CVSS 3.1

3.5 low

EPSS

<1%p11

Published

Mar 19, 2025 (Mar 19, 2025)

Modified

Jun 17, 2026

Description

Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.

Weakness: CWE-362
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.