Sign-up

ID

VAR-202108-2516


TITLE

An information disclosure vulnerability exists in the streaming media management server of Hangzhou Hikvision Digital Technology Co., Ltd.

Trust: 0.6

sources: CNVD: CNVD-2021-51304

DESCRIPTION

Hangzhou Hikvision Digital Technology Co., Ltd. is a video-centric IoT solution provider, providing comprehensive security, smart business and big data services. An information disclosure vulnerability exists in the streaming media management server of Hangzhou Hikvision Digital Technology Co., Ltd., which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2021-51304

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2021-51304

AFFECTED PRODUCTS

vendor:hikvision digitalmodel:streaming media management serverscope:eqversion:v4.4.1

Trust: 0.6

sources: CNVD: CNVD-2021-51304

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2021-51304
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2021-51304
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2021-51304

EXTERNAL IDS

db:CNVDid:CNVD-2021-51304

Trust: 0.6

sources: CNVD: CNVD-2021-51304

SOURCES

db:CNVDid:CNVD-2021-51304

LAST UPDATE DATE

2022-05-04T09:21:16.376000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2021-51304date:2021-07-19T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2021-51304date:2021-08-22T00:00:00