CyberRota Analysis
AI-GeneratedA vulnerability in Sipeed PicoClaw versions up to 0.2.9 allows unauthorized access due to insufficient authorization checks in the rt.ReloadConfig function, specifically when manipulating the argument message.send. This flaw can be exploited remotely, potentially compromising the integrity of the application. Organizations using affected versions of Sipeed PicoClaw should prioritize remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Sipeed PicoClaw up to 0.2.9. This vulnerability affects the function rt.ReloadConfig of the file pkg/channels/pico/pico.go. Performing a manipulation of the argument message.send results in missing authorization. It is possible to initiate the attack remotely. The exploit is now public and may be used. The reported GitHub issue was closed automatically due to inactivity.