Valmet DNA vulnerabilities

2 known vulnerabilities in Valmet DNA from Valmet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Valmet DNA: Improper Restriction of Excessive Authentication Attempts

  CVE-2025-0417Apr 1, 2025Valmet

  Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing swit

• 8.9 High severity

  Valmet DNA: Execution with Unnecessary Privileges

  CVE-2025-0416Apr 1, 2025Valmet

  Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePri