ID

VAR-202008-1266


TITLE

Shanghai ZLAN Information Technology Co., Ltd. ZLAN serial server has logic flaws and vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2020-45122

DESCRIPTION

ZLAN5102 serial server is a protocol converter between RS232/485 and TCP/IP developed by Shanghai ZLAN Information Technology Co., Ltd. The serial server can easily connect serial devices to Ethernet and the Internet, and realize the network upgrade of serial devices. ZLAN5103 is a new generation of high-performance serial server developed by Shanghai ZLAN based on ZLAN1003. The ZLAN serial server of Shanghai ZLAN Information Technology Co., Ltd. has a logic flaw vulnerability. Attackers can use this vulnerability to modify device information without authorization.

Trust: 0.6

sources: CNVD: CNVD-2020-45122

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-45122

AFFECTED PRODUCTS

vendor:zlan informationmodel:serial server zlan5102scope: - version: -

Trust: 0.6

vendor:zlan informationmodel:serial server zlan5103scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2020-45122

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-45122
value: LOW

Trust: 0.6

CNVD: CNVD-2020-45122
severity: LOW
baseScore: 3.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:N
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-45122

PATCH

title:ZLAN1902 port private protocol has logic flaws and vulnerabilitiesurl:https://www.cnvd.org.cn/patchinfo/show/223131

Trust: 0.6

sources: CNVD: CNVD-2020-45122

EXTERNAL IDS

db:CNVDid:CNVD-2020-45122

Trust: 0.6

sources: CNVD: CNVD-2020-45122

SOURCES

db:CNVDid:CNVD-2020-45122

LAST UPDATE DATE

2022-05-04T08:52:35.840000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-45122date:2020-08-10T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-45122date:2020-08-07T00:00:00