ID

VAR-202003-1814


TITLE

The campus card of the University of Electronic Science and Technology of China has arbitrary copying and reading vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2020-10202

DESCRIPTION

The University of Electronic Science and Technology of China is located in Chengdu City, Sichuan Province, formerly known as Chengdu Telecommunication Engineering College. It is composed of Jiaotong University (now Shanghai Jiaotong University, Xi’an Jiaotong University), Nanjing Institute of Technology (now Southeast University), and South China Institute of Technology (now South China University of Technology). Engineering related professions merged and created. The campus card of the University of Electronic Science and Technology of China has vulnerabilities in arbitrary copying and reading. Attackers can use the vulnerabilities to realize arbitrary copying and reading and writing functions.

Trust: 0.6

sources: CNVD: CNVD-2020-10202

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-10202

AFFECTED PRODUCTS

vendor:universitymodel:of electronic science and technology of china student campus cardscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-10202

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-10202
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-10202
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-10202

EXTERNAL IDS

db:CNVDid:CNVD-2020-10202

Trust: 0.6

sources: CNVD: CNVD-2020-10202

SOURCES

db:CNVDid:CNVD-2020-10202

LAST UPDATE DATE

2022-05-04T10:21:40.504000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-10202date:2020-03-17T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-10202date:2020-03-02T00:00:00