Improper Authorization in Internet Doctor Workstation System by 浙江湖州华卓信息科技有限公司

CVE-2025-3981

What is CVE-2025-3981?

A vulnerability has been discovered in the Internet Doctor Workstation System 1.0 offered by 浙江湖州华卓信息科技有限公司. This issue stems from an improper authorization process in the handling of requests to the /v1/prescription/details/ endpoint. The weakness can be exploited remotely, requiring an attacker to manipulate requests to gain unauthorized access, posing significant security risks. Although the vendor was notified of this security flaw, they have not responded. Users are advised to review their configurations and implement security measures to mitigate potential exploits.

References