Sign-up

ID

VAR-202108-2421


TITLE

An unauthorized access vulnerability exists in the cloud patrol system of Beijing Landhua Electronic Technology Co., Ltd.

Trust: 0.6

sources: CNVD: CNVD-2021-46256

DESCRIPTION

Beijing Landwell Electronic Technology Co., Ltd. (abbreviated as Landwell), established all independent intellectual property rights and independent brand "LANDWELL" mobile automatic identification products; built RFID key intelligent management system, GPRS patrol inspection system research and development , Manufacturing, sales and system integration of high-tech enterprises. An unauthorized access vulnerability exists in the cloud patrol system of Beijing Landhua Electronic Technology Co., Ltd. Attackers can use vulnerabilities to construct requests through interface documents to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-46256

IOT TAXONOMY

category:['IoT']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-46256

AFFECTED PRODUCTS

vendor:landwa electronicmodel:cloud patrol systemscope:eqversion:3.0.0

Trust: 0.6

sources: CNVD: CNVD-2021-46256

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-46256
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-46256
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-46256

EXTERNAL IDS

db:CNVDid:CNVD-2021-46256

Trust: 0.6

sources: CNVD: CNVD-2021-46256

SOURCES

db:CNVDid:CNVD-2021-46256

LAST UPDATE DATE

2022-05-04T09:49:47.953000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-46256date:2021-06-30T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-46256date:2021-08-04T00:00:00