Details of VAR-201911-1785

ID

VAR-201911-1785

TITLE

Kunlun Tong State MCGS Touch Screen TPC1062Ti System Has Information Disclosure Vulnerability

Trust: 0.6

sources: CNVD: CNVD-2019-41052

DESCRIPTION

MCGS is a Windows-based configuration software system developed by Beijing Kunlun Tongstate Automation Software Technology Co., Ltd., which is used to quickly construct and generate a host computer monitoring system. It mainly completes field data collection and monitoring, front-end data processing and Control, can run on Microsoft Windows 95/98 / Me / NT / 2000 / xp and other operating systems. The Kunlun Tong State MCGS touch screen TPC1062Ti system has an information disclosure vulnerability. An attacker can use the vulnerability to send special messages to specific ports to obtain key information of the system. You can log in to the telnet server, view the critical system, and perform any operation. Microsoft Windows 95/98/Me/NT/2000/xp And other operating systems

Trust: 0.72

sources: CNVD: CNVD-2019-41052 // IVD: f0937dde-780f-497c-abbe-f03c82067bfc

IOT TAXONOMY

category:

['ICS']

sub_category:

Trust: 0.8

sources: IVD: f0937dde-780f-497c-abbe-f03c82067bfc // CNVD: CNVD-2019-41052

AFFECTED PRODUCTS

vendor:	kunlun tongstate	model:	mcgs tpc1062ti	scope:	-	version:	-	Trust: 0.6
vendor:	kunlun tongstate	model:	mcgs tpc1062ti	scope:	eq	version:	*	Trust: 0.2

sources: IVD: f0937dde-780f-497c-abbe-f03c82067bfc // CNVD: CNVD-2019-41052

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2019-41052
value:	HIGH
Trust: 0.6
IVD:	f0937dde-780f-497c-abbe-f03c82067bfc
value:	HIGH
Trust: 0.2

CNVD:	CNVD-2019-41052
severity:	HIGH
baseScore:	8.3
vectorString:	AV:A/AC:L/AU:N/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	f0937dde-780f-497c-abbe-f03c82067bfc
severity:	HIGH
baseScore:	8.3
vectorString:	AV:A/AC:L/AU:N/C:C/I:C/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: f0937dde-780f-497c-abbe-f03c82067bfc // CNVD: CNVD-2019-41052

TYPE

Information leakage

Trust: 0.2

sources: IVD: f0937dde-780f-497c-abbe-f03c82067bfc

PATCH

title:

Kunlun Tong State MCGS Touch Screen TPC1062Ti System Has Information Disclosure Vulnerability

url:

https://www.cnvd.org.cn/patchinfo/show/185097

Trust: 0.6

sources: CNVD: CNVD-2019-41052

EXTERNAL IDS

db:	CNVD	id:	CNVD-2019-41052	Trust: 0.8
db:	IVD	id:	F0937DDE-780F-497C-ABBE-F03C82067BFC	Trust: 0.2

sources: IVD: f0937dde-780f-497c-abbe-f03c82067bfc // CNVD: CNVD-2019-41052

SOURCES

db:	IVD	id:	f0937dde-780f-497c-abbe-f03c82067bfc
db:	CNVD	id:	CNVD-2019-41052

LAST UPDATE DATE

2022-05-17T02:10:28.113000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2019-41052

date:

2019-11-19T00:00:00

SOURCES RELEASE DATE

db:	IVD	id:	f0937dde-780f-497c-abbe-f03c82067bfc	date:	2019-11-18T00:00:00
db:	CNVD	id:	CNVD-2019-41052	date:	2019-11-25T00:00:00