Sign-up

ID

VAR-202505-3911


TITLE

Shenzhen Congwen Security Electronics Co., Ltd.'s police cloud integrated management server has a weak password vulnerability

Trust: 0.6

sources: CNVD: CNVD-2025-10980

DESCRIPTION

Shenzhen Congwen Security Electronics Co., Ltd. was founded in Shenzhen in 1993. It is committed to building the police cloud IoT security operation software platform and solutions, which are widely used in smart finance, safe campus, smart community, fire emergency and other fields. Shenzhen Congwen Security Electronics Co., Ltd. Police Cloud Integrated Integrated Management Server has a weak password vulnerability, which can be exploited by attackers to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2025-10980

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2025-10980

AFFECTED PRODUCTS

vendor:congwen securitymodel:police cloud integrated management server cn8000scope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2025-10980

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2025-10980
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2025-10980
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2025-10980

EXTERNAL IDS

db:CNVDid:CNVD-2025-10980

Trust: 0.6

sources: CNVD: CNVD-2025-10980

SOURCES

db:CNVDid:CNVD-2025-10980

LAST UPDATE DATE

2025-06-04T22:54:48.701000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2025-10980date:2025-05-29T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2025-10980date:2025-05-26T00:00:00