Sign-up

ID

VAR-201805-1237


TITLE

Guangdong Telecom's IPTV Converged Smart Set-Top Box Z84 has a logic flaw

Trust: 0.6

sources: CNVD: CNVD-2018-10443

DESCRIPTION

IPTV integrated intelligent set-top box is a set-top box device produced by Guangdong Telecom. Guangdong Telecom's IP84 Converged Intelligent Set-Top Box Z84 has a logic flaw. Due to the failure of the password modification function, an attacker can use the initial password to log in to the background, resulting in information leakage.

Trust: 0.6

sources: CNVD: CNVD-2018-10443

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2018-10443

AFFECTED PRODUCTS

vendor:telecommodel:guangdong branch guangdong telecom iptv converged intelligent set-top box zhaoneng z84scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2018-10443

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2018-10443
value: LOW

Trust: 0.6

CNVD: CNVD-2018-10443
severity: LOW
baseScore: 1.4
vectorString: AV:A/AC:H/AU:S/C:P/I:N/A:N
accessVector: ADJACENT_NETWORK
accessComplexity: HIGH
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.5
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2018-10443

EXTERNAL IDS

db:CNVDid:CNVD-2018-10443

Trust: 0.6

sources: CNVD: CNVD-2018-10443

SOURCES

db:CNVDid:CNVD-2018-10443

LAST UPDATE DATE

2022-05-04T09:29:06.919000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2018-10443date:2019-05-07T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2018-10443date:2018-05-31T00:00:00