Sign-up

ID

VAR-202211-0589


CVE

CVE-2021-38828


TITLE

xiongmaitech  of  xm-jpr2-lx  Vulnerability in cleartext transmission of sensitive information in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2021-020522

DESCRIPTION

Xiongmai Camera XM-JPR2-LX V4.02.R12.A6420987.10002.147502.00000 is vulnerable to plain-text traffic sniffing. xiongmaitech of xm-jpr2-lx A vulnerability exists in the firmware regarding the transmission of sensitive information in plaintext.Information may be obtained

Trust: 1.62

sources: NVD: CVE-2021-38828 // JVNDB: JVNDB-2021-020522

IOT TAXONOMY

category:['camera device']sub_category:camera

Trust: 0.1

sources: OTHER: None

AFFECTED PRODUCTS

vendor:xiongmaitechmodel:xm-jpr2-lxscope:lteversion:4.02.r12.a6420987.10002.147502.00000

Trust: 1.0

vendor:xiongmaitechmodel:xm-jpr2-lxscope:eqversion: -

Trust: 0.8

vendor:xiongmaitechmodel:xm-jpr2-lxscope: - version: -

Trust: 0.8

vendor:xiongmaitechmodel:xm-jpr2-lxscope:lteversion:xm-jpr2-lx firmware 4.02.r12.a6420987.10002.147502.00000 and earlier

Trust: 0.8

sources: JVNDB: JVNDB-2021-020522 // NVD: CVE-2021-38828

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-38828
value: MEDIUM

Trust: 1.0

134c704f-9b21-4f2e-91b3-4a467353bcc0: CVE-2021-38828
value: MEDIUM

Trust: 1.0

NVD: CVE-2021-38828
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202211-2676
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2021-38828
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: ADJACENT
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 1.6
impactScore: 3.6
version: 3.1

Trust: 2.0

NVD: CVE-2021-38828
baseSeverity: MEDIUM
baseScore: 5.3
vectorString: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: ADJACENT NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2021-020522 // CNNVD: CNNVD-202211-2676 // NVD: CVE-2021-38828 // NVD: CVE-2021-38828

PROBLEMTYPE DATA

problemtype:CWE-319

Trust: 1.0

problemtype:Sending important information in clear text (CWE-319) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-020522 // NVD: CVE-2021-38828

THREAT TYPE

remote or local

Trust: 0.6

sources: CNNVD: CNNVD-202211-2676

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202211-2676

PATCH

title:Xiongmai Camera XM-JPR2-LX Security vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=214412

Trust: 0.6

sources: CNNVD: CNNVD-202211-2676

EXTERNAL IDS

db:NVDid:CVE-2021-38828

Trust: 3.3

db:JVNDBid:JVNDB-2021-020522

Trust: 0.8

db:CNNVDid:CNNVD-202211-2676

Trust: 0.6

db:OTHERid:NONE

Trust: 0.1

sources: OTHER: None // JVNDB: JVNDB-2021-020522 // CNNVD: CNNVD-202211-2676 // NVD: CVE-2021-38828

REFERENCES

url:https://github.com/chandlerchin/xiongmaicamera/blob/main/sniffing%20the%20plain-text%20traffic%20in%20xiongmai%20camera.pdf

Trust: 2.4

url:https://nvd.nist.gov/vuln/detail/cve-2021-38828

Trust: 1.4

url:https://cxsecurity.com/cveshow/cve-2021-38828/

Trust: 0.6

url:https://ieeexplore.ieee.org/abstract/document/10769424

Trust: 0.1

sources: OTHER: None // JVNDB: JVNDB-2021-020522 // CNNVD: CNNVD-202211-2676 // NVD: CVE-2021-38828

SOURCES

db:OTHERid: -
db:JVNDBid:JVNDB-2021-020522
db:CNNVDid:CNNVD-202211-2676
db:NVDid:CVE-2021-38828

LAST UPDATE DATE

2025-05-01T20:21:32.144000+00:00


SOURCES UPDATE DATE

db:JVNDBid:JVNDB-2021-020522date:2023-11-06T08:10:00
db:CNNVDid:CNNVD-202211-2676date:2022-11-18T00:00:00
db:NVDid:CVE-2021-38828date:2025-04-30T21:15:51.843

SOURCES RELEASE DATE

db:JVNDBid:JVNDB-2021-020522date:2023-11-06T00:00:00
db:CNNVDid:CNNVD-202211-2676date:2022-11-13T00:00:00
db:NVDid:CVE-2021-38828date:2022-11-14T02:15:09.250