ID

VAR-202002-1684


TITLE

Shijiazhuang Hejia Technology Co., Ltd. information room vulnerability monitoring loopholes

Trust: 0.6

sources: CNVD: CNVD-2020-04675

DESCRIPTION

The equipment room moving ring monitoring system is a monitoring function of the equipment room's important environment and power equipment, including environmental equipment monitoring (temperature, humidity, smoke, flooding, precision air conditioning, ordinary air conditioning, new fans, etc.), power equipment monitoring (power distribution, Generator, UPS, battery, lightning arrester, etc.), security equipment monitoring (fire protection, access control, video, etc.), etc. An information disclosure vulnerability exists in the Shijiazhuang Hejia Technology Co., Ltd. computer room moving ring monitoring system. Attackers can use this vulnerability to access sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2020-04675

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-04675

AFFECTED PRODUCTS

vendor:shijiazhuang hejiamodel:dynamic ring monitoring systemscope:lteversion:<=2.1.8

Trust: 0.6

sources: CNVD: CNVD-2020-04675

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-04675
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-04675
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-04675

PATCH

title:Information leakage vulnerability exists in the dynamic ring monitoring systemurl:https://www.cnvd.org.cn/patchinfo/show/196555

Trust: 0.6

sources: CNVD: CNVD-2020-04675

EXTERNAL IDS

db:CNVDid:CNVD-2020-04675

Trust: 0.6

sources: CNVD: CNVD-2020-04675

SOURCES

db:CNVDid:CNVD-2020-04675

LAST UPDATE DATE

2022-05-04T09:22:00.462000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-04675date:2020-02-12T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-04675date:2020-02-21T00:00:00