Description
WeenyGenius, a computer lab management system by Howyar Technologies, has an Origin Validation Error vulnerability. Unauthenticated attackers on the same network can spoof the teacher workstation and send broadcast packets, causing student computers to attempt to establish a connection with the attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Howyar | WeenyGenius | ≤ 12.2.031 | — |
References
- https://www.twcert.org.tw/tw/cp-132-11201-658c0-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html third-party-advisory