Details of VAR-202101-1993

ID

VAR-202101-1993

TITLE

Information disclosure vulnerabilities exist in various webcams of Shenzhen Qiaoan Technology Co., Ltd. (CNVD-2020-68653)

Trust: 0.6

sources: CNVD: CNVD-2020-68653

DESCRIPTION

Shenzhen Qiaoan Technology Co., Ltd. is a professional R&D and manufacturer of surveillance cameras, specializing in the production of Qiaoan surveillance, Qiaoan surveillance cameras, etc. Several webcams of Shenzhen Qiaoan Technology Co., Ltd. have information disclosure vulnerabilities, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2020-68653

AFFECTED PRODUCTS

vendor:	qiaoan	model:	ja-770	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c7m	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c1k	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2t	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2c	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-g4r	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2t-l	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q7m	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q7	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f8	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2e	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q10	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q3	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c10	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2t-n	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q13c	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f10	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c10e	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2r	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q3r	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c6k	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2k	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q7k	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-f2k-4x	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c5	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q8	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c9	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q5	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-a6	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-q7r	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-g4c	scope:	eq	version:	01.03.29.14	Trust: 0.6
vendor:	qiaoan	model:	ja-c6	scope:	eq	version:	01.03.29.14	Trust: 0.6

sources: CNVD: CNVD-2020-68653

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2020-68653
value:	MEDIUM
Trust: 0.6

CNVD:	CNVD-2020-68653
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2020-68653

EXTERNAL IDS

db:

CNVD

id:

CNVD-2020-68653

Trust: 0.6

sources: CNVD: CNVD-2020-68653

SOURCES

db:

CNVD

id:

CNVD-2020-68653

LAST UPDATE DATE

2022-05-04T10:10:43.071000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2020-68653

date:

2020-12-03T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2020-68653

date:

2021-01-04T00:00:00