Sign-up

ID

VAR-202106-2322


TITLE

Shenzhen Kexu Technology Co., Ltd. campus IoT intelligent management system has a weak password vulnerability

Trust: 0.6

sources: CNVD: CNVD-2021-35523

DESCRIPTION

The campus IoT intelligent management system can monitor and control all access devices in real time, centralized management, data statistics, and report presentation. Shenzhen Kexu Technology Co., Ltd. campus IoT intelligent management system has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-35523

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-35523

AFFECTED PRODUCTS

vendor:liuhe futuremodel:campus internet of things intelligent management systemscope:eqversion:1.7.45

Trust: 0.6

sources: CNVD: CNVD-2021-35523

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-35523
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-35523
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-35523

EXTERNAL IDS

db:CNVDid:CNVD-2021-35523

Trust: 0.6

sources: CNVD: CNVD-2021-35523

SOURCES

db:CNVDid:CNVD-2021-35523

LAST UPDATE DATE

2022-05-04T10:03:08.833000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-35523date:2021-05-19T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-35523date:2021-06-19T00:00:00