Telekom
Monthly
A product has missing 2FA rate limiting allowing unlimited brute-force attempts against two-factor authentication codes.
A product has an access control flaw allowing activation token reuse on the password-reset endpoint for unauthorized account takeover.
STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A product has missing 2FA rate limiting allowing unlimited brute-force attempts against two-factor authentication codes.
A product has an access control flaw allowing activation token reuse on the password-reset endpoint for unauthorized account takeover.
STRATO HiDrive Desktop Client 5.0.1.0 for Windows suffers from a SYSTEM privilege escalation vulnerability through the HiDriveMaintenanceService service. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.