What is CVE-2024-48143?

CVE-2024-48143 is a critical-severity vulnerability in N/a, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 9.1/10. Published 2024-10-24.

How severe is CVE-2024-48143?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in N/a

CVE-2024-48143

A lack of rate limiting in the OTP validation component of Digitory Multi Channel Integrated POS v1.0 allows attackers to gain access to the ordering system and place an excessive amount of food orders.

EPSS: 0.004 (30.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-307 — Improper Restriction of Excessive Authentication Attempts

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2024-48143?: CVE-2024-48143 is a critical-severity vulnerability in N/a, classified under Improper Restriction of Excessive Authentication Attempts. CVSS score: 9.1/10. Published 2024-10-24.
How severe is CVE-2024-48143?: Critical severity. CVSS v3 base score is 9.1 out of 10.