ID

VAR-202405-2830


TITLE

Beijing Asia Control Technology Development Co., Ltd. Asia Control Giant SCADA Monitoring Platform has an unauthorized access vulnerability

Trust: 0.6

sources: CNVD: CNVD-2024-19725

DESCRIPTION

The Yakong Giant SCADA Monitoring Platform is a high-end industrial automation full-configuration monitoring software suitable for "all-trusted" industrial control systems. It supports the joint use of all mainstream trusted CPUs, operating systems, PLC devices, and databases. The Yakong Giant SCADA Monitoring Platform of Beijing Yakong Technology Development Co., Ltd. has an unauthorized access vulnerability, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2024-19725

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2024-19725

AFFECTED PRODUCTS

vendor:asia controlmodel:giant scada monitoring platformscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2024-19725

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2024-19725
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2024-19725
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2024-19725

PATCH

title:Patch for Beijing Asia Control Technology Development Co., Ltd. Asia Control Giant SCADA Monitoring Platform has an unauthorized access vulnerabilityurl:https://www.cnvd.org.cn/patchinfo/show/546086

Trust: 0.6

sources: CNVD: CNVD-2024-19725

EXTERNAL IDS

db:CNVDid:CNVD-2024-19725

Trust: 0.6

sources: CNVD: CNVD-2024-19725

SOURCES

db:CNVDid:CNVD-2024-19725

LAST UPDATE DATE

2024-06-02T22:49:52.989000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2024-19725date:2024-05-14T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2024-19725date:2024-05-17T00:00:00