CVE-2023-37362CWE-522

Weintek Weincloud Improper Authentication

High · published July 19, 2023

CVSS v3.1
7.2
EPSS
1%
Percentile
50.2
In the wild
Unconfirmed
What it is

Weintek Weincloud v0.13.6

could allow an attacker to abuse the registration functionality to login with testing credentials to the official website.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00643 · 50.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2023-07-19T21:50Z
EPSS history
Timeline
  • 19 JUL 21:50Z
    Weintek Weincloud Improper Authentication
    cvelistv5