This vulnerability (CWE-862) in Genian SSL PNS (frodo-core) involves missing authorization controls that enable an attacker to bypass multi-factor authentication mechanisms by altering a parameter in the login request. The CVSS 4.0 base score is 7.3, indicating high severity with network attack vector, low attack complexity, and no user interaction required. The attacker requires low privileges but can achieve high impact by circumventing authentication controls.

An attacker can bypass multi-factor authentication, potentially gaining unauthorized access to the system or sensitive functions protected by MFA. This undermines the security assurances provided by multi-factor authentication, increasing the risk of unauthorized access and potential compromise of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or fix information is provided, users should monitor official Genians advisories for updates and consider additional compensating controls to protect authentication processes until a fix is available.