Details of VAR-201608-0417

ID

VAR-201608-0417

TITLE

SQL injection vulnerability exists in EMN intelligent network management system

Trust: 0.6

sources: CNVD: CNVD-2016-05778

DESCRIPTION

The EMN intelligent network management system is a DNS service system composed of industrial hardware devices and embedded DNS software systems. There is a SQL injection vulnerability in the EMN intelligent network management system. Allows an attacker to obtain sensitive database information using common SQL injection tools

Trust: 0.72

sources: CNVD: CNVD-2016-05778 // IVD: c7fbff0d-4b26-4cfb-9a0d-862177762282

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: c7fbff0d-4b26-4cfb-9a0d-862177762282 // CNVD: CNVD-2016-05778

AFFECTED PRODUCTS

vendor:	gansu cuiying information	model:	emn intelligent network management system	scope:	-	version:	-	Trust: 0.6
vendor:	gansu cuiying information	model:	emn intelligent network management system	scope:	eq	version:	*	Trust: 0.2

sources: IVD: c7fbff0d-4b26-4cfb-9a0d-862177762282 // CNVD: CNVD-2016-05778

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2016-05778
value:	HIGH
Trust: 0.6
IVD:	c7fbff0d-4b26-4cfb-9a0d-862177762282
value:	HIGH
Trust: 0.2

CNVD:	CNVD-2016-05778
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	c7fbff0d-4b26-4cfb-9a0d-862177762282
severity:	HIGH
baseScore:	7.8
vectorString:	AV:N/AC:L/AU:N/C:C/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: c7fbff0d-4b26-4cfb-9a0d-862177762282 // CNVD: CNVD-2016-05778

TYPE

SQL injection

Trust: 0.2

sources: IVD: c7fbff0d-4b26-4cfb-9a0d-862177762282

EXTERNAL IDS

db:	CNVD	id:	CNVD-2016-05778	Trust: 0.8
db:	WOOYUN	id:	WOOYUN-2016-0226406	Trust: 0.6
db:	IVD	id:	C7FBFF0D-4B26-4CFB-9A0D-862177762282	Trust: 0.2

sources: IVD: c7fbff0d-4b26-4cfb-9a0d-862177762282 // CNVD: CNVD-2016-05778

REFERENCES

url:

http://www.wooyun.org/bugs/wooyun-2016-0226406

Trust: 0.6

sources: CNVD: CNVD-2016-05778

SOURCES

db:	IVD	id:	c7fbff0d-4b26-4cfb-9a0d-862177762282
db:	CNVD	id:	CNVD-2016-05778

LAST UPDATE DATE

2022-05-17T02:08:05.469000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2016-05778

date:

2016-08-03T00:00:00

SOURCES RELEASE DATE

db:	IVD	id:	c7fbff0d-4b26-4cfb-9a0d-862177762282	date:	2016-08-01T00:00:00
db:	CNVD	id:	CNVD-2016-05778	date:	2016-10-07T00:00:00