Sign-up

ID

VAR-202007-1493


TITLE

The Guojia III smart gateway has a hijacking vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-38425

DESCRIPTION

Beijing Guojia Intelligent Electronic Technology Co., Ltd. is an Internet smart lock company. Guojia III smart gateway has a hijacking vulnerability, which can be exploited by attackers to obtain and modify sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2020-38425

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-38425

AFFECTED PRODUCTS

vendor:guojia intelligent electronicmodel:iii intelligent gatewayscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-38425

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-38425
value: LOW

Trust: 0.6

CNVD: CNVD-2020-38425
severity: LOW
baseScore: 3.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-38425

PATCH

title:The Guojia III smart gateway has a hijacking vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/217819

Trust: 0.6

sources: CNVD: CNVD-2020-38425

EXTERNAL IDS

db:CNVDid:CNVD-2020-38425

Trust: 0.6

sources: CNVD: CNVD-2020-38425

SOURCES

db:CNVDid:CNVD-2020-38425

LAST UPDATE DATE

2022-05-04T09:46:19.834000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-38425date:2020-07-15T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-38425date:2020-07-01T00:00:00