Advisories · Technology
Sipeed PicoClaw.
Every CVE that names Sipeed PicoClaw among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.3 Medium
Sipeed PicoClaw First Run Setup access_control.go authentication bypass
- Sipeed PicoClaw
- Authentication bypass
- CVSS 5.3 Medium
Sipeed PicoClaw Group Message feishu_64.go handleMessageReceive authorization
- Sipeed PicoClaw
- Broken access control
- CVSS 5.3 Medium
Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery
- Sipeed PicoClaw
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Sipeed PicoClaw Group Message wecom.go dispatchIncoming authorization
- Sipeed PicoClaw
- Broken access control
- CVSS 4.8 Medium
Sipeed PicoClaw context.go NewContextBuilder inclusion of functionality from untrusted control sphere
- Sipeed PicoClaw
- CWE-829
- CVSS 6.9 Medium
Sipeed PicoClaw web.go web_fetch server-side request forgery
- Sipeed PicoClaw
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Sipeed PicoClaw LINE Webhook line.go webhook.ParseRequest authentication replay
- Sipeed PicoClaw
- Authentication bypass
- CVSS 4.8 Medium
Sipeed PicoClaw pipeline_execute.go ExecTool.executeRun toctou
- Sipeed PicoClaw
- Race condition
- CVSS 5.3 Medium
Sipeed PicoClaw auth.go cross-site request forgery
- Sipeed PicoClaw
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 5.3 Medium
Sipeed PicoClaw pico.go rt.ReloadConfig authorization
- Sipeed PicoClaw
- Broken access control
- CVSS 6.9 Medium
Sipeed PicoClaw Launcher access_control.go IPAllowlist access control
- Sipeed PicoClaw
- Privilege escalation
- Broken access control
- CVSS 5.3 Medium
Sipeed PicoClaw MQTT Channel mqtt.go authorization
- Sipeed PicoClaw
- Broken access control
- CVSS 5.3 Medium
Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery
- Sipeed PicoClaw
- Server-side request forgery (SSRF)