Details of VAR-201611-0416

ID

VAR-201611-0416

TITLE

Shanghai Bingfeng Computer Network Technology Co., Ltd. online behavior management system has arbitrary command execution vulnerability

Trust: 0.6

sources: CNVD: CNVD-2016-06493

DESCRIPTION

Shanghai Bingfeng Computer Network Technology Co., Ltd. online behavior management system is a network auditing equipment. Shanghai Bingfeng Computer Network Technology Co., Ltd. online behavior management system has arbitrary command execution vulnerabilities, and attackers can exploit the vulnerability to obtain server permissions

Trust: 1.08

sources: CNVD: CNVD-2016-06493 // CNVD: CNVD-2016-06633

IOT TAXONOMY

category:	['Network device']	sub_category:	-	Trust: 0.6
category:	['IoT', 'Network device']	sub_category:	-	Trust: 0.6

sources: CNVD: CNVD-2016-06493 // CNVD: CNVD-2016-06633

AFFECTED PRODUCTS

vendor:	bingfeng computer network	model:	online behavior management system	scope:	-	version:	-	Trust: 0.6
vendor:	d link	model:	internet behavior management system	scope:	-	version:	-	Trust: 0.6

sources: CNVD: CNVD-2016-06493 // CNVD: CNVD-2016-06633

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2016-06493
value:	HIGH
Trust: 0.6
CNVD:	CNVD-2016-06633
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2016-06493
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
CNVD:	CNVD-2016-06633
severity:	HIGH
baseScore:	7.5
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2016-06493 // CNVD: CNVD-2016-06633

EXTERNAL IDS

db:	WOOYUN	id:	WOOYUN-2016-0192732	Trust: 1.2
db:	CNVD	id:	CNVD-2016-06493	Trust: 0.6
db:	CNVD	id:	CNVD-2016-06633	Trust: 0.6

sources: CNVD: CNVD-2016-06493 // CNVD: CNVD-2016-06633

REFERENCES

url:

http://www.wooyun.org/bugs/wooyun-2016-0192732

Trust: 1.2

sources: CNVD: CNVD-2016-06493 // CNVD: CNVD-2016-06633

SOURCES

db:	CNVD	id:	CNVD-2016-06493
db:	CNVD	id:	CNVD-2016-06633

LAST UPDATE DATE

2022-05-17T02:04:32.108000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2016-06493	date:	2016-08-21T00:00:00
db:	CNVD	id:	CNVD-2016-06633	date:	2016-08-24T00:00:00

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2016-06493	date:	2016-11-03T00:00:00
db:	CNVD	id:	CNVD-2016-06633	date:	2016-11-03T00:00:00