Sign-up

ID

VAR-202010-1641


TITLE

Shanghai ZLAN Information Technology Co., Ltd. ZLAN7144N2 has an information disclosure vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-57250

DESCRIPTION

Shanghai ZLAN Information Technology Co., Ltd. is a high-tech enterprise that provides industrial IoT solutions. It was established in 2008. Its products include serial server, IoT chips, serial to Ethernet, etc. Shanghai ZLAN Information Technology Co., Ltd. ZLAN7144N2 has an information disclosure vulnerability. An attacker can use the vulnerability to send a specific message to the UDP port through the network to obtain the WiFi hotspot connection password of the device.

Trust: 0.6

sources: CNVD: CNVD-2020-57250

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-57250

AFFECTED PRODUCTS

vendor:zlan informationmodel:zlan7144n2scope:eqversion:1.5.02

Trust: 0.6

sources: CNVD: CNVD-2020-57250

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-57250
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-57250
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-57250

EXTERNAL IDS

db:CNVDid:CNVD-2020-57250

Trust: 0.6

sources: CNVD: CNVD-2020-57250

SOURCES

db:CNVDid:CNVD-2020-57250

LAST UPDATE DATE

2022-05-04T09:37:59.181000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-57250date:2020-10-19T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-57250date:2020-10-18T00:00:00