Lucene search
HistoryJul 19, 2023 - 10:15 p.m.
CVE-2023-34429
weintek weincloud
vulnerability
dos
forged jwt token
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.8%
Weintek Weincloud v0.13.6
could allow an attacker to cause a denial-of-service condition for Weincloud by sending a forged JWT token.
Affected configurations
Node
weintekweincloudMatch0.13.6
Related
prion
prion
Design/Logic Flaw
2023-07-19 22:15:00
cvelist
cvelist
CVE-2023-34429 Weintek Weincloud Improper Handling of Structural Elements
2023-07-19 21:45:39
cve
cve
CVE-2023-34429
2023-07-19 22:15:11
ics
ics
Weintek Weincloud
2023-07-18 12:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
22.8%
Related for NVD:CVE-2023-34429