Sign-up

ID

VAR-201709-1241


TITLE

Chongqing Lanyu Tianchen Technology Co., Ltd. Modern Agricultural Park Meteorological Information Integrated Management System Excessive Access and Weak Password Vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2017-19781

DESCRIPTION

The modern agricultural park meteorological information comprehensive management system is a weather system suitable for agriculture. Chongqing Lanyu Tianchen Technology Co., Ltd.'s modern agricultural park meteorological information integrated management system has unauthorized access and weak password loopholes. An attacker could use the vulnerability to obtain sensitive information or perform unauthorized operations.

Trust: 0.6

sources: CNVD: CNVD-2017-19781

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2017-19781

AFFECTED PRODUCTS

vendor:chongqing lanyu tianchenmodel:integrated weather management information system for modern agricultural parkscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2017-19781

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2017-19781
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2017-19781
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2017-19781

PATCH

title:Chongqing Lanyu Tianchen Technology Co., Ltd. Unauthorized Access Vulnerability and Weak Password Vulnerability in the Background of the Modern Agricultural Park Integrated Weather Information Management Systemurl:https://www.cnvd.org.cn/patchinfo/show/98442

Trust: 0.6

sources: CNVD: CNVD-2017-19781

EXTERNAL IDS

db:CNVDid:CNVD-2017-19781

Trust: 0.6

sources: CNVD: CNVD-2017-19781

SOURCES

db:CNVDid:CNVD-2017-19781

LAST UPDATE DATE

2022-05-04T09:56:45.283000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2017-19781date:2017-08-21T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2017-19781date:2017-09-03T00:00:00