CyberRota Analysis
AI-GeneratedA vulnerability in the Group Message Handler of Sipeed PicoClaw versions up to 0.2.9 allows for incorrect authorization due to flaws in the dispatchIncoming function, potentially enabling remote attacks. Organizations using affected versions should prioritize patching this issue, as the exploit is publicly available and could be leveraged by attackers.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.