CVE-2025-3550
wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System detail improper authorization
- State
- Published
- Severity
- 5.3 Medium
- Published
- Apr 14, 2025
- Updated
- Apr 14, 2025
- Reserved
- Apr 13, 2025
Description
A vulnerability has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /v1/pushConfig/detail/. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N | VulDB |
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | VulDB |
| 3.0 | 4.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | VulDB |
| 2.0 | 4.0 Medium | AV:N/AC:L/Au:S/C:P/I:N/A:N | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Internet Doctor Workstation Systemwowjoy 浙江湖州华卓信息科技有限公司 |
|
References
- VDB-304591 | wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System detail improper authorizationvdb-entry
- VDB-304591 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #547789 | 浙江湖州华卓信息科技有限公司 Internet doctor workstation system 1.0 未授权访问漏洞third-party-advisory
- https://github.com/38279/2/issues/1exploitissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.