Lucene search

MitreCVE-2022-47703

HistoryFeb 16, 2023 - 10:15 p.m.

CVE-2022-47703

2023-02-1622:15:11

CWE-306

mitre

web.nvd.nist.gov

tianjie

cpe906-3

password disclosure

vulnerability

web5.0_lcd_20200513

mv8.003

cpf906-v5.0_lcd_20200513

nvd

cve-2022-47703

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513.

Affected configurations

Nvd

Node

tianjiecpe906-3Matchcpf906-v5.0_lcd_20200513

AND

tianjiecpe906-3Matchweb5.0_lcd_20200513

tianjiecpe906-3_firmwareMatchmv8.003

VendorProductVersionCPE
tianjiecpe906-3cpf906-v5.0_lcd_20200513cpe:2.3:h:tianjie:cpe906-3:cpf906-v5.0_lcd_20200513:*:*:*:*:*:*:*
tianjiecpe906-3web5.0_lcd_20200513cpe:2.3:a:tianjie:cpe906-3:web5.0_lcd_20200513:*:*:*:*:*:*:*
tianjiecpe906-3_firmwaremv8.003cpe:2.3:o:tianjie:cpe906-3_firmware:mv8.003:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tianjie	cpe906-3	cpf906-v5.0_lcd_20200513	cpe:2.3:h:tianjie:cpe906-3:cpf906-v5.0_lcd_20200513:::::::*
tianjie	cpe906-3	web5.0_lcd_20200513	cpe:2.3:a:tianjie:cpe906-3:web5.0_lcd_20200513:::::::*
tianjie	cpe906-3_firmware	mv8.003	cpe:2.3:o:tianjie:cpe906-3_firmware:mv8.003:::::::*

References

github.com/OlivierLaflamme/cve/blob/main/TIANJIE/CPE906-3/unauth_password_disclosure.md

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.002

Percentile

59.0%

JSON

Related for CVE-2022-47703