Описание
An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website, this vulnerability can be exploited.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.1.1 (исключая)
Одновременно
cpe:2.3:a:signotec:signopad-api\/web:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
EPSS
Процентиль: 62%
0.00433
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-770
Связанные уязвимости
github
больше 3 лет назад
An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website, this vulnerability can be exploited.
EPSS
Процентиль: 62%
0.00433
Низкий
6.5 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-770