Details of VAR-201905-1326

ID

VAR-201905-1326

TITLE

Nanda's NATouch skm project file has a memory corruption vulnerability

Trust: 0.6

sources: CNVD: CNVD-2019-15527

DESCRIPTION

Nandao Technology Jiangsu Co., Ltd. is a company mainly engaged in the research and development, production, sales and maintenance of industrial automation products, and the development and integration of automation control systems. There is a memory corruption vulnerability in the NATouch skm project file of NTU, and an attacker can use this vulnerability to execute malicious code

Trust: 0.72

sources: CNVD: CNVD-2019-15527 // IVD: 1e5c8a7d-eaf6-4127-a85e-de5a899eec12

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: 1e5c8a7d-eaf6-4127-a85e-de5a899eec12 // CNVD: CNVD-2019-15527

AFFECTED PRODUCTS

vendor:	nanda opto jiangsu	model:	natouch	scope:	eq	version:	v1.0.0.3	Trust: 0.6
vendor:	nanda auto jiangsu	model:	natouch	scope:	eq	version:	v1.0.0.3	Trust: 0.2

sources: IVD: 1e5c8a7d-eaf6-4127-a85e-de5a899eec12 // CNVD: CNVD-2019-15527

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2019-15527
value:	MEDIUM
Trust: 0.6
IVD:	1e5c8a7d-eaf6-4127-a85e-de5a899eec12
value:	MEDIUM
Trust: 0.2

CNVD:	CNVD-2019-15527
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	1e5c8a7d-eaf6-4127-a85e-de5a899eec12
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: 1e5c8a7d-eaf6-4127-a85e-de5a899eec12 // CNVD: CNVD-2019-15527

TYPE

Resource management error

Trust: 0.2

sources: IVD: 1e5c8a7d-eaf6-4127-a85e-de5a899eec12

PATCH

title:

Nanda's NATouch skm project file has a memory corruption vulnerability

url:

https://www.cnvd.org.cn/patchinfo/show/159633

Trust: 0.6

sources: CNVD: CNVD-2019-15527

EXTERNAL IDS

db:	CNVD	id:	CNVD-2019-15527	Trust: 0.8
db:	IVD	id:	1E5C8A7D-EAF6-4127-A85E-DE5A899EEC12	Trust: 0.2

sources: IVD: 1e5c8a7d-eaf6-4127-a85e-de5a899eec12 // CNVD: CNVD-2019-15527

SOURCES

db:	IVD	id:	1e5c8a7d-eaf6-4127-a85e-de5a899eec12
db:	CNVD	id:	CNVD-2019-15527

LAST UPDATE DATE

2022-05-17T01:55:45.520000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2019-15527

date:

2019-06-04T00:00:00

SOURCES RELEASE DATE

db:	IVD	id:	1e5c8a7d-eaf6-4127-a85e-de5a899eec12	date:	2019-05-28T00:00:00
db:	CNVD	id:	CNVD-2019-15527	date:	2019-06-07T00:00:00