Insecure Application Identity Verification in hwKitAssistant: Implications for MeeTime Availability

Insecure Application Identity Verification in hwKitAssistant: Implications for MeeTime Availability

CVE-2023-0117 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may affect availability of features,such as MeeTime.

Learn more about our Web Application Penetration Testing UK.