WeenyGenius, ein Computerraum-Verwaltungssystem von Howyar Technologies, weist eine Verwendung eines unsicheren Protokolls-Schwachstelle …

Description

Metrics

Weakness classes (CWE)

• CWE-757Base

  Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

  A protocol or its implementation supports interaction between multiple actors and allows those actors to negotiate which algorithm should be used as a protection mechanism such as encryption or authentication, but it does not select the strongest algorithm that is available to both parties.

  cwe.mitre.org →

References & sources

• https://www.twcert.org.tw/tw/cp-132-11201-658c0-1.html
  third-party-advisory
• https://www.twcert.org.tw/en/cp-139-11200-ffc3c-2.html
  third-party-advisory

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

1. CVE Modified2026-09-11 16:17 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
   • SSVC: {"id":"CVE-2026-89177","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
2. New CVE Received2026-09-11 08:16 UTC· twcert@cert.org.tw
   • Description: WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to disrupt classroom operations.
   • CVSS V4.0: AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
   • CVSS V3.1: AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
   • CWE: CWE-757