Details of VAR-201607-0720

ID

VAR-201607-0720

TITLE

SQL Injection Vulnerability in Agricultural IoT Awareness Platform System

Trust: 0.6

sources: CNVD: CNVD-2016-05620

DESCRIPTION

The agricultural internet of things perception platform system is an industrial control system. There is a SQL injection vulnerability in the agricultural Internet of Things Awareness Platform system, and an attacker can exploit the vulnerability to obtain database sensitive information

Trust: 0.72

sources: CNVD: CNVD-2016-05620 // IVD: 88c870fd-384d-40c3-84a6-0fe5430693f3

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 88c870fd-384d-40c3-84a6-0fe5430693f3 // CNVD: CNVD-2016-05620

AFFECTED PRODUCTS

vendor:	agricultural	model:	internet of things awareness platform system agricultural internet of things awareness platform system	scope:	-	version:	-	Trust: 0.6
vendor:	agricultural	model:	iot perception platform system	scope:	eq	version:	*	Trust: 0.4

sources: IVD: 88c870fd-384d-40c3-84a6-0fe5430693f3 // CNVD: CNVD-2016-05620

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2016-05620
value:	HIGH
Trust: 0.6
IVD:	88c870fd-384d-40c3-84a6-0fe5430693f3
value:	HIGH
Trust: 0.2

CNVD:	CNVD-2016-05620
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	88c870fd-384d-40c3-84a6-0fe5430693f3
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: 88c870fd-384d-40c3-84a6-0fe5430693f3 // CNVD: CNVD-2016-05620

TYPE

SQL injection

Trust: 0.2

sources: IVD: 88c870fd-384d-40c3-84a6-0fe5430693f3

EXTERNAL IDS

db:	CNVD	id:	CNVD-2016-05620	Trust: 0.8
db:	WOOYUN	id:	WOOYUN-2016-0228603	Trust: 0.6
db:	IVD	id:	88C870FD-384D-40C3-84A6-0FE5430693F3	Trust: 0.2

sources: IVD: 88c870fd-384d-40c3-84a6-0fe5430693f3 // CNVD: CNVD-2016-05620

REFERENCES

url:

http://www.wooyun.org/bugs/wooyun-2016-0228603/auth/c3dccab1f5871d149ff9aa9512b909d1

Trust: 0.6

sources: CNVD: CNVD-2016-05620

SOURCES

db:	IVD	id:	88c870fd-384d-40c3-84a6-0fe5430693f3
db:	CNVD	id:	CNVD-2016-05620

LAST UPDATE DATE

2022-05-17T01:47:55.605000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2016-05620

date:

2016-07-28T00:00:00

SOURCES RELEASE DATE

db:	IVD	id:	88c870fd-384d-40c3-84a6-0fe5430693f3	date:	2016-07-28T00:00:00
db:	CNVD	id:	CNVD-2016-05620	date:	2016-10-14T00:00:00