PT-2022-20132 · Wolf Manufacturing · Joyebike Joy Ebike

Krutarth Raut + 2 · Published 2022-06-07 · Updated 2022-06-16 · CVE-2022-30466

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions joyebike Joy ebike Wolf Manufacturing year 2022

Description The issue concerns an Authentication Bypass by Capture-replay. This means that an attacker could potentially reuse captured authentication data to gain unauthorized access, bypassing the normal authentication process.

Recommendations For joyebike Joy ebike Wolf Manufacturing year 2022, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-294

Related Identifiers

CVE-2022-30466

Affected Products

Joyebike Joy Ebike

References · 4

• 🔥 https://github.com/nsbogam/ebike · Exploit
• https://osv.dev/vulnerability/CVE-2022-30466 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30466 · Security Note
• https://t.me/cibsecurity/43979 · Telegram Post