Back to Database
Status published
Low
CVE-2025-30235
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable...
Vulnerability Description
Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-30235
Credits & Attribution
No credits recorded in the NVD database.
References
Affected Vendor
SecurEnvoy
View all reports →Affected Software
SecurAccess
Vulnerable Versions:
0
Timeline
Official Publish:
March 19th, 2025
Last Modified:
March 19th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N