Vendors / Valmet Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Valmet records in CISA KEV No Valmet vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 44
An unauthenticated attacker can exploit this vulnerability by manipulating URL to achieve arbitrary file read access.This issue affects Valmet DNA Web Tools: C2022 and older.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00569 · Published 2026-02-12 · No fix listed CWE-22
Priority MEDIUM 40
Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023.
CVSS 4.0 HIGH 8.9· Adjacent network · Low privileges · No interaction · EPSS 0.00213 · Published 2025-04-01 · No fix listed CWE-250
Priority MEDIUM 40
A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012…
CVSS 3.1 HIGH 8.8· Adjacent network · No auth · No interaction · EPSS 0.01148 · Published 2022-02-16 · Fixed in Collection 2021 CWE-209
Priority LOW 30
Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate.
CVSS 4.0 HIGH 7.0· Local · No auth · No interaction · EPSS 0.0017 · Published 2025-04-01 · No fix listed CWE-307
Priority LOW 23
Valmet DNA user passwords in plain text.
CVSS 4.0 MEDIUM 5.2· Physical · No auth · No interaction · EPSS 0.00157 · Published 2025-04-01 · No fix listed CWE-312
Open these records in search → All records by CVSS severity
0 4 1 0 0
THREATIST.IORead the docs