Weintek Weincloud Improper Authentication
CVE-2023-37362

8.8HIGH

Key Information:

Vendor

Weintek

Status
Weincloud
Vendor
CVE Published:
19 July 2023

What is CVE-2023-37362?

An authentication bypass vulnerability exists in Weintek Weincloud v0.13.6, where attackers can exploit the registration feature to gain unauthorized login access using testing credentials. This flaw may lead to sensitive data exposure and unauthorized access to the platform.

Affected Version(s)

Weincloud 0 <= 0.13.6

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-1...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

​Hank Chen (PSIRT and Threat Research of TXOne Networks) reported these vulnerabilities to CISA.
.