Sign-up

ID

VAR-201906-1349


TITLE

Kaikai IoT Smart Street Light Controller Has Design Vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2019-16763

DESCRIPTION

Kaikaiwulian Intelligent Street Light Controller is a new-generation lighting controller independently developed by Kaikaiwulian (Beijing) Information Technology Co., Ltd. There is a design loophole in the Kaikai Internet of Things smart street light controller. An attacker can use this vulnerability to simulate the cloud to remotely issue control commands to all controllers by joining a communication network with the cloud to control the intelligent street light.

Trust: 0.6

sources: CNVD: CNVD-2019-16763

IOT TAXONOMY

category:['IoT', 'ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2019-16763

AFFECTED PRODUCTS

vendor:kaikai wulian informationmodel:intelligent street light controllerscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2019-16763

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2019-16763
value: HIGH

Trust: 0.6

CNVD: CNVD-2019-16763
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2019-16763

PATCH

title:There are other loopholes in the Kailuo Smart Street Light Controllerurl:https://www.cnvd.org.cn/patchinfo/show/161499

Trust: 0.6

sources: CNVD: CNVD-2019-16763

EXTERNAL IDS

db:CNVDid:CNVD-2019-16763

Trust: 0.6

sources: CNVD: CNVD-2019-16763

SOURCES

db:CNVDid:CNVD-2019-16763

LAST UPDATE DATE

2022-05-04T09:28:37.597000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2019-16763date:2019-06-17T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2019-16763date:2019-06-30T00:00:00