CVE-2024-45790

CVE-2024-45790 is a critical vulnerability affecting Reedos aiM-Star version 2.0.1, stemming from a lack of restrictions on failed API login attempts. This allows a remote attacker to perform brute-force attacks against user passwords, potentially leading to unauthorized access and compromise of user accounts. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, resulting in complete compromise of confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating it is not widely known or exploited at this time.