Sign-up

ID

VAR-202405-0649


TITLE

Beijing Yakong Technology Development Co., Ltd. KingPortal development system has an information leakage vulnerability (CNVD-2024-16583)

Trust: 0.6

sources: CNVD: CNVD-2024-16583

DESCRIPTION

Beijing Yakong Technology Development Co., Ltd. is a high-tech enterprise of industrial automation and information software platform established in 1997. Beijing Yakong Technology Development Co., Ltd. KingPortal development system has information leakage vulnerability, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2024-16583

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2024-16583

AFFECTED PRODUCTS

vendor:yakongmodel:kingportal development systemscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2024-16583

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2024-16583
value: LOW

Trust: 0.6

CNVD: CNVD-2024-16583
severity: LOW
baseScore: 2.1
vectorString: AV:N/AC:H/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: HIGH
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2024-16583

PATCH

title:Patch for Beijing Yakong Technology Development Co., Ltd. KingPortal development system has an information leakage vulnerability (CNVD-2024-16583)url:https://www.cnvd.org.cn/patchinfo/show/546526

Trust: 0.6

sources: CNVD: CNVD-2024-16583

EXTERNAL IDS

db:CNVDid:CNVD-2024-16583

Trust: 0.6

sources: CNVD: CNVD-2024-16583

SOURCES

db:CNVDid:CNVD-2024-16583

LAST UPDATE DATE

2024-05-17T19:18:28.895000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2024-16583date:2024-05-15T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2024-16583date:2024-05-15T00:00:00