CVE-2024-3461

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

KioWare for Windows (versions all through 8.35) allows to brute force the PIN number, which protects the application from being closed, as there are no mechanisms preventing a user from excessively guessing the number.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-307

Affected software

VendorProductVersions
KiowareKioware<= 8.35

References

Timeline

Published
May 14, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-346105.5Improper access control in ExtControlDeviceService prior to SMR Aug-2024 Release 1 allows local attackers to access protected data.CVE-2024-346115.5Improper access control in KnoxService prior to SMR Aug-2024 Release 1 allows local attackers to get sensitive information.CVE-2024-346127.8Out-of-bound write in libcodec2secmp4vdec.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.CVE-2024-346135.5Improper access control in Galaxy Watch prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive information of Galaxy watCVE-2024-346147.8Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to execute arbitrary code.CVE-2024-346157.8Out-of-bound write in libsmat.so prior to SMR Aug-2024 Release 1 allows local attackers to cause memory corruption.CVE-2024-346165.5Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitiveCVE-2024-346173.3Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default MessagCVE-2024-346183.3Improper access control in System property prior to SMR Aug-2024 Release 1 allows local attackers to access cell related information.CVE-2024-346198.8Improper input validation in librtp.so prior to SMR Aug-2024 Release 1 allows remote attackers to execute arbitrary code with system privileCVE-2024-34625.4Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a posCVE-2024-346207.8Improper privilege management in SumeNNService prior to SMR Aug-2024 Release 1 allows local attackers to start privileged service.
CVE-2024-3461: Medium severity, CVSS 5.5 | Vulnix