Sign-up

ID

VAR-202106-2335


TITLE

Tiandiweiye Easy7 video surveillance platform has an information disclosure vulnerability

Trust: 0.6

sources: CNVD: CNVD-2021-39060

DESCRIPTION

Tiandi Weiye Technology Co., Ltd. (TIANDY) is an Internet of Things enterprise focusing on the development, production and sales of video surveillance products. Tiandiweiye Easy7 video surveillance platform has an information disclosure vulnerability, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-39060

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-39060

AFFECTED PRODUCTS

vendor:tiandi weiyemodel:easy7 video surveillance platformscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2021-39060

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-39060
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-39060
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-39060

EXTERNAL IDS

db:CNVDid:CNVD-2021-39060

Trust: 0.6

sources: CNVD: CNVD-2021-39060

SOURCES

db:CNVDid:CNVD-2021-39060

LAST UPDATE DATE

2022-05-04T09:32:25.971000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-39060date:2021-06-03T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-39060date:2021-06-29T00:00:00