Paper/Archive/CVE-2024-7920

CVE-2024-7920

Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 — Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetParkInThroughDeivces access control

EPSS 0.7%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 54.2.542 × 2010.8 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

A vulnerability, which was classified as problematic, was found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. Affected is an unknown function of the file /Report/ParkCommon/GetParkInThroughDeivces. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected

ProductAffectedFixed inSource

Jieshun JieLink+ JSOTC201620240805–CNA

jieshun_jielink_plus_jsotc201620240805–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

VulDB (CNA)5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

VulDB (CNA)4.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

VulDB (CNA)4.3CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refvuldb.com/?id.275070 refvuldb.com/?ctiid.275070 writeupvuldb.com/?submit.387125 exploitwiki.shikangsi.com/post/share/123687c4-ff4b-48e8-8299-6f4950a75af5