CVE-2025-13165CWE-770denial-of-service

CVE-2025-13165

High · published November 17, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
37.4
In the wild
Unconfirmed
What it is

🚨 A few crafted requests can completely shut down the EasyFlow GP service! This Denial of Service vulnerability is a real nuisance waiting to happen. ⚡ Think of it like a restaurant where someone keeps ordering food that clogs the kitchen — each order is a request that the staff can’t handle, ultimately leaving everyone hungry and frustrated! This means that an attacker could effectively take down your web service, denying access to all legitimate users. Imagine your customers showing up only to find the doors locked — not ideal for business!

Put simply

Think of it like a restaurant where someone keeps ordering food that clogs the kitchen — each order is a request that the staff can’t handle, ultimately leaving everyone hungry and frustrated! The vulnerability in EasyFlow GP allows unauthenticated attackers to send specific requests that cause the server to become unresponsive, leading to a Denial of Service condition.

What to do

This means that an attacker could effectively take down your web service, denying access to all legitimate users. Imagine your customers showing up only to find the doors locked — not ideal for business! To protect your service, make sure you apply any available patches from Digiwin immediately, and consider implementing rate limiting on incoming requests to mitigate abuse. Regularly monitor your web service for unusual traffic patterns! You've got this! With a few simple steps, you can secure your service and keep those doors wide open for your users! 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00442 · 37.4th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-11-17T13:16Z
References (2)
EPSS history
Timeline
  • 17 NOV 06:46Z
    Digiwin|EasyFlow GP - Denial of service
    cvelistv5