ID

VAR-202105-1695


TITLE

Beijing Jiekong FameView configuration software has a memory corruption vulnerability

Trust: 0.6

sources: CNVD: CNVD-2021-28466

DESCRIPTION

FameView configuration software is a high-performance configuration monitoring software independently researched and developed by Beijing Jiekong Co., Ltd. with many years of engineering application and service experience, based on the Windows operating system, and provides economical and complete automation solutions. Beijing Jiekong FameView configuration software has a memory corruption vulnerability. Attackers can use this vulnerability to cause the program to crash.

Trust: 0.6

sources: CNVD: CNVD-2021-28466

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-28466

AFFECTED PRODUCTS

vendor:jiekongmodel:fameview configuration softwarescope:eqversion:v7.6.21.2

Trust: 0.6

sources: CNVD: CNVD-2021-28466

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-28466
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-28466
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-28466

EXTERNAL IDS

db:CNVDid:CNVD-2021-28466

Trust: 0.6

sources: CNVD: CNVD-2021-28466

SOURCES

db:CNVDid:CNVD-2021-28466

LAST UPDATE DATE

2022-05-04T10:17:57.275000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-28466date:2021-04-19T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-28466date:2021-05-21T00:00:00