This vulnerability in CodeWise Tornet Scooter Mobile App 4.75 affects an unknown function in the /TwoFactor file, resulting in improper restriction of excessive authentication attempts. This means the app does not sufficiently limit the number of authentication tries, potentially enabling brute force or similar attacks. The attack vector is remote, with high attack complexity and no privileges or user interaction required. The vulnerability has a CVSS 4.0 base score of 6.3 (medium severity). No official fix or patch has been provided by the vendor, who has not responded to the disclosure.

The vulnerability could allow an attacker to perform numerous authentication attempts without proper restriction, potentially facilitating brute force attacks against user accounts. However, the high attack complexity and lack of known active exploits reduce the immediacy of the threat. There is no indication of privilege escalation, user interaction, or impact on confidentiality, integrity, or availability beyond the authentication attempt limitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patch is available, users and administrators should monitor for updates from CodeWise. Until a fix is released, consider implementing additional protective measures such as external rate limiting or multi-factor authentication if possible. Avoid relying solely on the app's built-in authentication attempt restrictions.