Weintek Weincloud Improper Handling of Structural Elements
CVE-2023-34429

7.5HIGH

Key Information:

Vendor

Weintek

Status
Weincloud
Vendor
CVE Published:
19 July 2023

What is CVE-2023-34429?

The Weintek Weincloud service is susceptible to a denial-of-service (DoS) condition due to a flaw allowing attackers to send a forged JSON Web Token (JWT). This vulnerability can lead to service disruptions by manipulating the authentication process, potentially causing significant operational impacts for users relying on Weincloud's functionality.

Affected Version(s)

Weincloud 0 <= 0.13.6

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-1...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

​Hank Chen (PSIRT and Threat Research of TXOne Networks) reported these vulnerabilities to CISA.
.