CVE-2020-9345

MEDIUM 6.5CVE-2020-9345 · Published 20/03/2020 · updated 17/06/2026

In short

CVE-2020-9345 is a MEDIUM (CVSS 6.5) vulnerability affecting signopad-api/web (signotec).
Chance of exploitation in the next 30 days (EPSS): 0.92%, higher than 60.3% of all vulnerabilities.
Fix: update to 3.1.1 or later.

Package	Affected versions	Patched versions
signopad-api/web signotec	`< 3.1.1`	`3.1.1`

Description

An issue was discovered in signotec signoPAD-API/Web (formerly Websocket Pad Server) before 3.1.1 on Windows. It is possible to perform a Denial of Service attack because the application doesn't limit the number of opened WebSocket sockets. If a victim visits an attacker-controlled website, this vulnerability can be exploited.

References

syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-052.txt · Exploit

More vulnerabilities in signopad-api/web

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free