Weincloud
CVE-2023-34429
HIGH
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
1DescriptionNVD
Weintek Weincloud v0.13.6
could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.
AnalysisAI
Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-237. Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token. Affected products include: Weintek Weincloud.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credenti
Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with authen
Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JWT token only. R
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today