Lucene search

TwcertCVE-2020-3930

HistoryJun 12, 2020 - 9:15 a.m.

CVE-2020-3930

2020-06-1209:15:10

CWE-532

twcert

web.nvd.nist.gov

geovision

door access control

logs

security vulnerability

improper access control

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

12.6%

JSON

GeoVision Door Access Control device family improperly stores and controls access to system logs, any users can read these logs.

Affected configurations

Nvd

Node

geovisiongv-gf192x_firmwareMatch1.10

AND

geovisiongv-gf192xMatch-

VendorProductVersionCPE
geovisiongv-gf192x_firmware1.10cpe:2.3:o:geovision:gv-gf192x_firmware:1.10:*:*:*:*:*:*:*
geovisiongv-gf192x-cpe:2.3:h:geovision:gv-gf192x:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
geovision	gv-gf192x_firmware	1.10	cpe:2.3:o:geovision:gv-gf192x_firmware:1.10:::::::*
geovision	gv-gf192x	-	cpe:2.3:h:geovision:gv-gf192x:-:::::::*

CNA Affected

[
  {
    "product": "Door Access Control Device",
    "vendor": "GeoVision",
    "versions": [
      {
        "lessThanOrEqual": "1.10",
        "status": "affected",
        "version": "GV-GF192x",
        "versionType": "custom"
      }
    ]
  }
]

References

www.twcert.org.tw/tw/cp-132-3697-780d0-1.html

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2020-3930