ID

VAR-202002-1699


TITLE

Backdoor vulnerability exists in FameView configuration monitoring system of Beijing Jiekong

Trust: 0.6

sources: CNVD: CNVD-2020-10517

DESCRIPTION

FameView configuration software is a high-performance configuration monitoring software independently researched and developed by Beijing Jiekong Company with many years of engineering application and service experience, based on the Windows operating system, and provides economical and complete automation solutions. The FameView configuration monitoring system of Beijing Jiekong Company has a backdoor vulnerability. Attackers can use the backdoor password to access the configuration monitoring system on any device of the manufacturer and modify the configuration on the device.

Trust: 0.6

sources: CNVD: CNVD-2020-10517

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-10517

AFFECTED PRODUCTS

vendor:jiekongmodel:fameview configuration softwarescope:eqversion:7.6.20.1

Trust: 0.6

sources: CNVD: CNVD-2020-10517

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-10517
value: HIGH

Trust: 0.6

CNVD: CNVD-2020-10517
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-10517

PATCH

title:Beijing Jiekong FameView configuration monitoring system has a backdoor vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/196335

Trust: 0.6

sources: CNVD: CNVD-2020-10517

EXTERNAL IDS

db:CNVDid:CNVD-2020-10517

Trust: 0.6

sources: CNVD: CNVD-2020-10517

SOURCES

db:CNVDid:CNVD-2020-10517

LAST UPDATE DATE

2022-05-04T10:00:02.244000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-10517date:2020-03-16T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-10517date:2020-02-20T00:00:00