Sign-up

ID

VAR-202107-1762


TITLE

NM3000 network element management system has logic flaws and loopholes

Trust: 0.6

sources: CNVD: CNVD-2021-43983

DESCRIPTION

Dingdian Video Technology Co., Ltd. (abbreviated as Dingdian Video) is a wholly-owned subsidiary of Digital Video Group, focusing on the research and development, production, marketing and service of coaxial broadband access technology and optical communication technology. The NM3000 network element management system has a logic flaw vulnerability, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-43983

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-43983

AFFECTED PRODUCTS

vendor:dingdian videomodel:nm3000 network element management systemscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2021-43983

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-43983
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-43983
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-43983

EXTERNAL IDS

db:CNVDid:CNVD-2021-43983

Trust: 0.6

sources: CNVD: CNVD-2021-43983

SOURCES

db:CNVDid:CNVD-2021-43983

LAST UPDATE DATE

2022-05-04T10:14:43.071000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-43983date:2021-06-22T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-43983date:2021-07-22T00:00:00