Details of VAR-202106-2291

ID

VAR-202106-2291

TITLE

Four-Faith build 2781M router has command execution vulnerability

Trust: 0.6

sources: CNVD: CNVD-2021-30910

DESCRIPTION

Four-Faith is a router product of Xiamen Four-Faith Communication Technology Co., Ltd. The Four-Faith build 2781M router has a command execution vulnerability, which can be exploited by an attacker to gain control of the server.

Trust: 0.6

sources: CNVD: CNVD-2021-30910

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2021-30910

AFFECTED PRODUCTS

vendor:

four faith communication

model:

four-faith

scope:

version:

Trust: 0.6

sources: CNVD: CNVD-2021-30910

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD:	CNVD-2021-30910
value:	HIGH
Trust: 0.6

CNVD:	CNVD-2021-30910
severity:	HIGH
baseScore:	10.0
vectorString:	AV:N/AC:L/AU:N/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	10.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

sources: CNVD: CNVD-2021-30910

EXTERNAL IDS

db:

CNVD

id:

CNVD-2021-30910

Trust: 0.6

sources: CNVD: CNVD-2021-30910

SOURCES

db:

CNVD

id:

CNVD-2021-30910

LAST UPDATE DATE

2022-05-04T08:52:04.575000+00:00

SOURCES UPDATE DATE

db:

CNVD

id:

CNVD-2021-30910

date:

2021-04-26T00:00:00

SOURCES RELEASE DATE

db:

CNVD

id:

CNVD-2021-30910

date:

2021-06-01T00:00:00