ID

VAR-202007-1486


TITLE

Shenzhen Yichen Technology Co., Ltd. wireless router has an unauthorized access vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-33972

DESCRIPTION

Shenzhen Yichen Technology Co., Ltd. is a manufacturer and operator of network and communication equipment. The wireless router of Shenzhen Yichen Technology Co., Ltd. has an unauthorized access vulnerability. Attackers can use the vulnerability to perform unauthorized operations.

Trust: 0.6

sources: CNVD: CNVD-2020-33972

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-33972

AFFECTED PRODUCTS

vendor:yichenmodel:wireless router jyr-ac520scope: - version: -

Trust: 0.6

vendor:yichenmodel:wireless router jhr-n835rscope: - version: -

Trust: 0.6

vendor:yichenmodel:wireless router jhr-ac836mscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-33972

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-33972
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-33972
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-33972

PATCH

title:Unauthorized access vulnerability exists in the router of Shenzhen Yichen Technology Co., Ltd.url:https://www.cnvd.org.cn/patchinfo/show/220829

Trust: 0.6

sources: CNVD: CNVD-2020-33972

EXTERNAL IDS

db:CNVDid:CNVD-2020-33972

Trust: 0.6

sources: CNVD: CNVD-2020-33972

SOURCES

db:CNVDid:CNVD-2020-33972

LAST UPDATE DATE

2022-05-04T10:07:30.481000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-33972date:2020-06-23T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-33972date:2020-07-24T00:00:00