CVE-2020-9345 - An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows

Back Back to CVE browser

MEDIUM

An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows

Published Mar 20, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 0.92%

Description

An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website, this vulnerability can be exploited.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30166
Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-052.txt
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-30166		Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-052.txt		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 20, 2020

Updated Aug 4, 2024

Reserved Feb 22, 2020

Link CVE-2020-9345

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9345

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 20, 2020

Updated Aug 4, 2024

Link EUVD-2020-30166

GitHub

No data