Vulnerability in Meon Kyc Solutions
CVE-2025-42600
This vulnerability exists in Meon KYC solutions due to missing restrictions on the number of incorrect One-Time Password (OTP) attempts through certain API endpoints of login process. A remote attacker could exploit this vulnerability by performing a brute force attack on OTP, which could lead to gain unauthorized access to other user accounts.
EPSS: 0.004 (35.8th percentile) — read the EPSS interpretation.
Affected products
- Meon Kyc Solutions — versions 1.1
Weakness classification (CWE)
References
- vdisclose@cert-in.org.in (third-party-advisory)