ID

VAR-202002-1698


TITLE

The configuration monitoring system of Beijing Jiekong Technology Co., Ltd. has a code execution vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-10518

DESCRIPTION

FameView configuration software is a high-performance configuration monitoring software independently researched and developed by Beijing Jiekong Company with many years of engineering application and service experience, based on the Windows operating system, and provides economical and complete automation solutions. The configuration monitoring system of Beijing Jiekong Technology Co., Ltd. has code execution vulnerabilities. Attackers can use the vulnerabilities to construct malicious links to induce users to analyze and execute arbitrary code in the context of the application.

Trust: 0.6

sources: CNVD: CNVD-2020-10518

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-10518

AFFECTED PRODUCTS

vendor:jiekongmodel:fameview configuration softwarescope:eqversion:7.6.20.1

Trust: 0.6

sources: CNVD: CNVD-2020-10518

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-10518
value: HIGH

Trust: 0.6

CNVD: CNVD-2020-10518
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-10518

PATCH

title:Code execution vulnerability exists in Beijing Jiekong configuration monitoring systemurl:https://www.cnvd.org.cn/patchinfo/show/196337

Trust: 0.6

sources: CNVD: CNVD-2020-10518

EXTERNAL IDS

db:CNVDid:CNVD-2020-10518

Trust: 0.6

sources: CNVD: CNVD-2020-10518

SOURCES

db:CNVDid:CNVD-2020-10518

LAST UPDATE DATE

2022-05-04T09:46:33.920000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-10518date:2020-03-16T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-10518date:2020-02-20T00:00:00