Details of VAR-202009-1686

ID

VAR-202009-1686

TITLE

Tianshitong DVR has unauthorized vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-50910

DESCRIPTION

Skyview is a supplier of network video surveillance solutions and core circuit modules in China. Tianshitong hard disk video recorder has an unauthorized vulnerability, attackers can use the vulnerability to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2020-50910

IOT TAXONOMY

category:

['IoT']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2020-50910

AFFECTED PRODUCTS

vendor:

tianshitong electronic

model:

dvr

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2020-50910

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2020-50910
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2020-50910
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2020-50910

EXTERNAL IDS

db:

CNVD

id:

CNVD-2020-50910

Trust: 0.6

sources: CNVD: CNVD-2020-50910

SOURCES

db:

CNVD

id:

CNVD-2020-50910

LAST UPDATE DATE

2022-05-04T10:25:37.351000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2020-50910

date:

2020-10-29T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2020-50910

date:

2020-09-24T00:00:00