Technical impact
MeWare Software Development Inc. PDKS has an improper rate limiting weakness (CWE‑799) that permits an attacker to flood the system with requests. This can exhaust resources, degrade performance, or render the service unavailable. The likely attack vector is remote, though the description does not explicitly state it, so the inference is based on the nature of a flooding vulnerability.
Affected Systems
Products affected are MeWare Software Development Inc. PDKS for all releases from V16.20200313 up to, but not including, VMYR_3.5.2025117.
Risk and Exploitability
The CVSS score of 8.1 indicates a high severity. EPSS is not available, so the probability of exploitation cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. The lack of a publicly disclosed fix suggests that exploitation via remote flooding remains a realistic threat, especially in environments where the affected PDKS is exposed to untrusted networks.
