CVE-2023-32657
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jul 19, 2023
Updated: Jul 26, 2023
CWE ID 307
Summary
CVE-2023-32657 refers to a vulnerability in Weintek Weincloud version 0.13.6. This issue allows an attacker to efficiently launch a brute force attack against credentials, thanks to error message responses that inadvertently reveal authentication hints. Successful exploitation of this vulnerability could lead to unauthorized access to the affected system. Organizations using Weintek Weincloud are advised to update to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Weintek Labs., Inc.