Vendors / joey-zhou Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 0
Exploited now joey-zhou records in CISA KEV No joey-zhou vulnerabilities are listed in CISA KEV.
Priority MEDIUM 61
Xiaozhi-esp32-server-java through 6.1.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid device WebSocket tokens by requesting /api/device/ota with any MAC address.
CVSS 4.0 MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00465 · Published 2026-10-16 · No fix listed CWE-290
Priority MEDIUM 57
A weakness has been identified in joey-zhou xiaozhi-esp32-server-java up to 3.0.0.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00331 · Published 2025-12-28 · Fixed in 4.0.0 CWE-287
Priority MEDIUM 57
A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00334 · Published 2025-04-07 · No fix listed CWE-74
Open these records in search → All records by CVSS severity
0 0 3 0 0
