ID

VAR-202502-2686


TITLE

Shanghai Boda Data Communication Co., Ltd.'s Internet behavior management and auditing have information leakage vulnerabilities

Trust: 0.6

sources: CNVD: CNVD-2025-03738

DESCRIPTION

Shanghai Boda Data Communication Co., Ltd. is China's first generation professional IP network product and solution provider. Shanghai Boda Data Communication Co., Ltd. has an information leakage vulnerability in its online behavior management and auditing, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2025-03738

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-03738

AFFECTED PRODUCTS

vendor:boda data communicationmodel:online behavior management and auditscope:eqversion:v5.0

Trust: 0.6

sources: CNVD: CNVD-2025-03738

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2025-03738
value: LOW

Trust: 0.6

CNVD: CNVD-2025-03738
severity: LOW
baseScore: 2.1
vectorString: AV:N/AC:H/AU:S/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: HIGH
authentication: SINGLE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 3.9
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2025-03738

EXTERNAL IDS

db:CNVDid:CNVD-2025-03738

Trust: 0.6

sources: CNVD: CNVD-2025-03738

SOURCES

db:CNVDid:CNVD-2025-03738

LAST UPDATE DATE

2025-03-02T23:26:54.470000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-03738date:2025-02-26T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-03738date:2025-02-11T00:00:00