CyberRota Analysis
AI-GeneratedA vulnerability exists in Sipeed PicoClaw versions up to 0.2.9, specifically in the isPrivateOrRestrictedIP function within the web_fetch component, allowing for server-side request forgery (SSRF). This weakness can be exploited remotely, potentially leading to unauthorized access to internal services. Organizations utilizing affected versions should prioritize applying the available patch to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405. To fix this issue, it is recommended to deploy a patch.