ID

VAR-202101-2029


TITLE

Taiwan Weilun Technology Co., Ltd. EasyAccess2.0 (Windows client) has a dll hijacking vulnerability

Trust: 0.6

sources: CNVD: CNVD-2020-72481

DESCRIPTION

EasyAccess2.0 is a remote access tool for man-machine interface produced by Weintek. It allows you to remotely access on-site machinery and equipment thousands of miles away from anywhere, and realize remote monitoring of HMI man-machine interface and remote penetration of PLC controllers. , Complete status monitoring and program update are as simple as QQ. Not only do you no longer need to care about IP, set routing, and open ports as traditionally, but also do not need to spend time and effort to set up a VPN network. Taiwan Weilun Technology Co., Ltd. EasyAccess2.0 (Windows client) has a dll hijacking vulnerability. Attackers can use this vulnerability to execute malicious code.

Trust: 0.6

sources: CNVD: CNVD-2020-72481

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-72481

AFFECTED PRODUCTS

vendor:weilunmodel:easyaccess2.0scope:eqversion:2.10.7

Trust: 0.6

sources: CNVD: CNVD-2020-72481

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2020-72481
value: HIGH

Trust: 0.6

CNVD: CNVD-2020-72481
severity: HIGH
baseScore: 7.2
vectorString: AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2020-72481

PATCH

title:Patch for Taiwan Weilun Technology Co., Ltd. EasyAccess2.0 (Windows client) has a dll hijacking vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/264391

Trust: 0.6

sources: CNVD: CNVD-2020-72481

EXTERNAL IDS

db:CNVDid:CNVD-2020-72481

Trust: 0.6

sources: CNVD: CNVD-2020-72481

SOURCES

db:CNVDid:CNVD-2020-72481

LAST UPDATE DATE

2022-05-04T09:21:30.702000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-72481date:2021-05-12T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-72481date:2021-01-18T00:00:00