CNVD-2015-05842

Vulnerability from cnvd - Published: 2015-10-01
VLAI Severity ?
Title
大型车辆GPS定位系统存在认证绕过漏洞
Description
大多数网站为asp页面，漏洞较多并且可弱口令登录，导致大量车辆信息泄露，同时可以对车辆进行管理和控制，会造成较大的交通危害
Severity
中
Patch Name
大型车辆GPS定位系统后台登录权限绕过漏洞
Patch Description
注：找不到厂商。
Formal description

减少对车辆控制的功能，降低风险 更换后台系统，避免弱口令漏洞再次发生 相关人员不当

Show details on source website
To clipboard 

{
  "description": "\u5927\u591a\u6570\u7f51\u7ad9\u4e3aasp\u9875\u9762\uff0c\u6f0f\u6d1e\u8f83\u591a\u5e76\u4e14\u53ef\u5f31\u53e3\u4ee4\u767b\u5f55\uff0c\u5bfc\u81f4\u5927\u91cf\u8f66\u8f86\u4fe1\u606f\u6cc4\u9732\uff0c\u540c\u65f6\u53ef\u4ee5\u5bf9\u8f66\u8f86\u8fdb\u884c\u7ba1\u7406\u548c\u63a7\u5236\uff0c\u4f1a\u9020\u6210\u8f83\u5927\u7684\u4ea4\u901a\u5371\u5bb3",
  "discovererName": "cailinlin",
  "formalWay": "\u51cf\u5c11\u5bf9\u8f66\u8f86\u63a7\u5236\u7684\u529f\u80fd\uff0c\u964d\u4f4e\u98ce\u9669\r\n\u66f4\u6362\u540e\u53f0\u7cfb\u7edf\uff0c\u907f\u514d\u5f31\u53e3\u4ee4\u6f0f\u6d1e\u518d\u6b21\u53d1\u751f\r\n\u76f8\u5173\u4eba\u5458\u4e0d\u5f53",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-05842",
  "openTime": "2015-10-01",
  "patchDescription": "\u6ce8\uff1a\u627e\u4e0d\u5230\u5382\u5546\u3002",
  "patchName": "\u5927\u578b\u8f66\u8f86GPS\u5b9a\u4f4d\u7cfb\u7edf\u540e\u53f0\u767b\u5f55\u6743\u9650\u7ed5\u8fc7\u6f0f\u6d1e",
  "serverity": "\u4e2d",
  "submitTime": "2015-08-26",
  "title": "\u5927\u578b\u8f66\u8f86GPS\u5b9a\u4f4d\u7cfb\u7edf\u5b58\u5728\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.