CVE-2020-9345

Name of the Vulnerable Software and Affected Versions signotec signoPAD-API/Web versions prior to 3.1.1

Description The issue allows for a Denial of Service attack due to the application not limiting the number of opened WebSocket sockets. This can be exploited if a victim visits an attacker-controlled website.

Recommendations For versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the WebSocket API to minimize the risk of exploitation.