Sign-up

ID

VAR-202005-1107


TITLE

Asia Control Technology KingView (KingView) has an information disclosure vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-26318

DESCRIPTION

KingView (KingView) is the first industrial configuration software product launched by Asia Control in China. There is an information disclosure vulnerability in KingView, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2020-26318

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-26318

AFFECTED PRODUCTS

vendor:asia controlmodel:kingviewscope:eqversion:v75.3.1.0

Trust: 0.6

sources: CNVD: CNVD-2020-26318

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-26318
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-26318
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-26318

PATCH

title:There is an information disclosure vulnerability in the Kingview mobile client service programurl:https://www.cnvd.org.cn/patchinfo/show/214357

Trust: 0.6

sources: CNVD: CNVD-2020-26318

EXTERNAL IDS

db:CNVDid:CNVD-2020-26318

Trust: 0.6

sources: CNVD: CNVD-2020-26318

SOURCES

db:CNVDid:CNVD-2020-26318

LAST UPDATE DATE

2022-05-04T10:10:59.667000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-26318date:2021-12-08T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-26318date:2020-05-31T00:00:00