Details of VAR-201911-1786

ID

VAR-201911-1786

TITLE

MCGS touch screen TPC1061Ti has unauthorized access vulnerability

Trust: 0.6

sources: CNVD: CNVD-2019-40772

DESCRIPTION

MCGS touch screen TPC1061Ti is an industrial man-machine interface developed by Shenzhen Kunlun Tongstate Technology Co., Ltd., which is widely used in the field of industrial control. MCGS touch screen TPC1061Ti has an unauthorized access vulnerability. An attacker could use this vulnerability to gain unauthorized access and perform unauthorized operations

Trust: 0.72

sources: CNVD: CNVD-2019-40772 // IVD: 85fc7d62-513b-4c0b-8fbc-0dc5353da7f2

IOT TAXONOMY

category:	['IoT', 'ICS']	sub_category:	-	Trust: 0.6
category:	['ICS']	sub_category:	-	Trust: 0.2

sources: IVD: 85fc7d62-513b-4c0b-8fbc-0dc5353da7f2 // CNVD: CNVD-2019-40772

AFFECTED PRODUCTS

vendor:	kunlun tongstate automation	model:	mcgs touch screen tpc1061ti	scope:	-	version:	-	Trust: 0.6
vendor:	kunlun tongstate automation	model:	mcgs touch screen tpc1061ti	scope:	eq	version:	*	Trust: 0.2

sources: IVD: 85fc7d62-513b-4c0b-8fbc-0dc5353da7f2 // CNVD: CNVD-2019-40772

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2019-40772
value:	LOW
Trust: 0.6
IVD:	85fc7d62-513b-4c0b-8fbc-0dc5353da7f2
value:	LOW
Trust: 0.2

CNVD:	CNVD-2019-40772
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
IVD:	85fc7d62-513b-4c0b-8fbc-0dc5353da7f2
severity:	LOW
baseScore:	2.1
vectorString:	AV:L/AC:L/AU:N/C:P/I:N/A:N
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.9 [IVD]
Trust: 0.2

sources: IVD: 85fc7d62-513b-4c0b-8fbc-0dc5353da7f2 // CNVD: CNVD-2019-40772

TYPE

Access verification error

Trust: 0.2

sources: IVD: 85fc7d62-513b-4c0b-8fbc-0dc5353da7f2

PATCH

title:

MCGS touch screen TPC1061Ti has unauthorized access vulnerability

url:

https://www.cnvd.org.cn/patchinfo/show/184919

Trust: 0.6

sources: CNVD: CNVD-2019-40772

EXTERNAL IDS

db:	CNVD	id:	CNVD-2019-40772	Trust: 0.8
db:	IVD	id:	85FC7D62-513B-4C0B-8FBC-0DC5353DA7F2	Trust: 0.2

sources: IVD: 85fc7d62-513b-4c0b-8fbc-0dc5353da7f2 // CNVD: CNVD-2019-40772

SOURCES

db:	IVD	id:	85fc7d62-513b-4c0b-8fbc-0dc5353da7f2
db:	CNVD	id:	CNVD-2019-40772

LAST UPDATE DATE

2022-05-17T02:04:28.163000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2019-40772

date:

2019-11-19T00:00:00

SOURCES RELEASE DATE

db:	IVD	id:	85fc7d62-513b-4c0b-8fbc-0dc5353da7f2	date:	2019-11-15T00:00:00
db:	CNVD	id:	CNVD-2019-40772	date:	2019-11-14T00:00:00