CVE-2020-9343

An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows

published March 20, 2020

CVSS
—
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the implementation doesn't limit the parsing of nested JSON structures. If a victim visits an attacker-controlled website, this vulnerability can be exploited via WebSocket data with a deeply nested JSON array.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00935 · 60.4th percentile
Published
2020-03-20T02:18Z
EPSS history
Timeline
  • 20 MAR 02:18Z
    An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows
    cvelistv5