Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeintek Weincloud
APPWeintek0.13.6
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2023-34429HIGH7.5ten sam produkt
Weintek Weincloud v0.13.6 could allow an attacker to cause a denial-of-service condition for Weincloud ...
CVE-2023-35134HIGH7.4ten sam produkt
Weintek Weincloud v0.13.6 could allow an attacker to reset a password with the corresponding account’s JW...
CVE-2023-32657MEDIUM5.3ten sam produkt
Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on creden...
CVE-2024-55020CRITICAL9.8PL ✓ten sam vendor
Command injection z uprawnieniami root w Weintek cMT-3072XH2 easyweb
CVE-2024-55024CRITICAL9.8PL ✓ten sam vendor
Pominięcie uwierzytelniania w Weintek cMT-3072XH2 easyweb — dostęp administracyjny