Sign-up

ID

VAR-202106-2066


TITLE

Feiyuxing enterprise-level intelligent online behavior management system has logic flaws and loopholes

Trust: 0.6

sources: CNVD: CNVD-2021-33191

DESCRIPTION

Chengdu Feiyuxing Technology Co., Ltd. is a company dedicated to providing intelligent and easy-to-use network communication products and services, continuously improving the quality of network use through innovative technologies, and cooperating with users to create an intelligent and user-friendly network management platform. The Feiyuxing enterprise-level intelligent online behavior management system has logic flaws and loopholes. Attackers can use vulnerabilities to bypass account passwords and directly log in to the management background to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-33191

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-33191

AFFECTED PRODUCTS

vendor:feiyuxingmodel:enterprise-level intelligent internet behavior management system build-n41060-190429scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2021-33191

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-33191
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-33191
severity: MEDIUM
baseScore: 6.4
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-33191

EXTERNAL IDS

db:CNVDid:CNVD-2021-33191

Trust: 0.6

sources: CNVD: CNVD-2021-33191

SOURCES

db:CNVDid:CNVD-2021-33191

LAST UPDATE DATE

2022-05-04T09:08:33.737000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-33191date:2021-05-08T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-33191date:2021-06-05T00:00:00