ID

VAR-202002-1690


TITLE

Pulian wireless network camera has unauthorized access vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-04855

DESCRIPTION

Pulian Technology Co., Ltd. (hereinafter referred to as "TP-LINK") is a supplier of network communication equipment. The Pulian wireless network camera has an unauthorized access vulnerability. An attacker can connect to the camera's wifi and turn on GPS to bypass account login and obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2020-04855

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-04855

AFFECTED PRODUCTS

vendor:pulianmodel:network cloud camerascope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-04855

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-04855
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-04855
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-04855

PATCH

title:Pulian wireless network camera has unauthorized access vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/195513

Trust: 0.6

sources: CNVD: CNVD-2020-04855

EXTERNAL IDS

db:CNVDid:CNVD-2020-04855

Trust: 0.6

sources: CNVD: CNVD-2020-04855

SOURCES

db:CNVDid:CNVD-2020-04855

LAST UPDATE DATE

2022-05-04T08:53:01.028000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-04855date:2020-02-13T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-04855date:2020-02-09T00:00:00