A vulnerability was identified in cu silicon up to 0.1.5. Affected by this vulnerability is the function create_app of the file views.py of the component edit Endpoint. Such manipulation leads to missing authentication. The attack may be performed from remote. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been identified in cu silicon up to version 0.1.5. The vulnerability affects the create_app function in views.py within the edit Endpoint component. Exploitation of this flaw leads to missing authentication, allowing unauthenticated access. The attack can be performed remotely without requiring local access. A public exploit is already available, increasing the risk of active exploitation. The vendor was notified prior to disclosure but did not respond. This raises concerns about the availability of a patch or mitigation. The lack of vendor response leaves users of affected versions at continued risk.