Sign-up

ID

VAR-202101-2017


TITLE

Bohan Weiye (Beijing) Technology Co., Ltd. has logic flaws and loopholes in the integrated management and control cloud service platform of community arterial property management

Trust: 0.6

sources: CNVD: CNVD-2021-01382

DESCRIPTION

Bohan Weiye (Beijing) Technology Co., Ltd. is a comprehensive solution provider for mobile Internet of Things. Bohan Weiye (Beijing) Technology Co., Ltd. has logic flaws and loopholes in the community arterial property management integrated management and control cloud service platform. Attackers can use vulnerabilities to log in to the system to gain administrator rights and perform unauthorized operations.

Trust: 0.6

sources: CNVD: CNVD-2021-01382

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-01382

AFFECTED PRODUCTS

vendor:bohan weiyemodel:community arterial property management integrated management and control cloud service platformscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2021-01382

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-01382
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-01382
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-01382

EXTERNAL IDS

db:CNVDid:CNVD-2021-01382

Trust: 0.6

sources: CNVD: CNVD-2021-01382

SOURCES

db:CNVDid:CNVD-2021-01382

LAST UPDATE DATE

2022-05-04T09:02:18.158000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-01382date:2021-01-08T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-01382date:2021-01-30T00:00:00