Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
wolfSSL before 4.5.0 mishandles TLS 1.3 server data in the WAIT_CERT_CR state, within SanityCheckTls13MsgReceived() in tls13.c. This is an incorrect implementation of the TLS 1.3 client state machine. This allows attackers in a privileged network position to completely impersonate any TLS 1.3 servers, and read or modify potentially sensitive information between clients using the wolfSSL library and these TLS servers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
wolfSSL 信任管理问题漏洞
Vulnerability Description
Wolfssl（CyaSSL）是美国Wolfssl公司的一个针对嵌入式系统开发人员使用的小的、可移植的嵌入式SSL编程库。 Wolfssl 4.5.0之前版本存在信任管理问题漏洞，攻击者可以使用该漏洞读或修改潜在敏感数据。
CVSS Information
N/A
Vulnerability Type
N/A