Sign-up

ID

VAR-201209-0658


TITLE

Ezylog photovoltaic management server Built-in account vulnerability

Trust: 0.8

sources: IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5078

DESCRIPTION

Ezylog photovoltaic management server is a SCADA product. Ezylog photovoltaic management server \"login.php\" will check the user authentication information, but the device has built-in authorization 2 (some settings are 3) accounts, these accounts have predefined passwords (such as the encrypted ciphertext is \"satIZufhIrUfk\", the corresponding string is \"36e44c9b64\") is built into the PHP file and cannot be changed or deleted by an attacker to gain unauthorized access to the device

Trust: 0.72

sources: CNVD: CNVD-2012-5078 // IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.8

sources: IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5078

AFFECTED PRODUCTS

vendor:schneidermodel:electric ezylog photovoltaic management serverscope: - version: -

Trust: 0.6

vendor:schneidermodel:electric ezylog photovoltaic management server nullscope:eqversion:*

Trust: 0.2

sources: IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5078

CVSS

SEVERITY

CVSSV2

CVSSV3

IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d
severity: NONE
baseScore: NONE
vectorString: NONE
accessVector: NONE
accessComplexity: NONE
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: UNKNOWN

Trust: 0.2

sources: IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d

TYPE

Permission permissions and access control issues

Trust: 0.2

sources: IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d

EXTERNAL IDS

db:CNVDid:CNVD-2012-5078

Trust: 0.8

db:IVDid:4B52BDC4-1F56-11E6-ABEF-000C29C66E3D

Trust: 0.2

sources: IVD: 4b52bdc4-1f56-11e6-abef-000c29c66e3d // CNVD: CNVD-2012-5078

REFERENCES

url:http://seclists.org/bugtraq/2012/sep/44

Trust: 0.6

sources: CNVD: CNVD-2012-5078

SOURCES

db:IVDid:4b52bdc4-1f56-11e6-abef-000c29c66e3d
db:CNVDid:CNVD-2012-5078

LAST UPDATE DATE

2022-05-17T01:57:52.496000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2012-5078date:2012-09-13T00:00:00

SOURCES RELEASE DATE

db:IVDid:4b52bdc4-1f56-11e6-abef-000c29c66e3ddate:2012-09-13T00:00:00
db:CNVDid:CNVD-2012-5078date:2012-09-13T00:00:00