ID

VAR-202011-1576


TITLE

Unauthorized access vulnerability exists in Netis WF2501

Trust: 0.6

sources: CNVD: CNVD-2020-58423

DESCRIPTION

NETIS SYSTEMS is part of the NETCORE Group and is headquartered in Shenzhen, China. Netis WF2501 has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2020-58423

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-58423

AFFECTED PRODUCTS

vendor:netismodel:systems wf2501scope:eqversion:v1.2.21425

Trust: 0.6

sources: CNVD: CNVD-2020-58423

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-58423
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2020-58423
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-58423

EXTERNAL IDS

db:CNVDid:CNVD-2020-58423

Trust: 0.6

sources: CNVD: CNVD-2020-58423

SOURCES

db:CNVDid:CNVD-2020-58423

LAST UPDATE DATE

2022-05-04T09:32:38.174000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-58423date:2020-10-25T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-58423date:2020-11-24T00:00:00