Sign-up

ID

VAR-202309-2861


TITLE

Maipu Telecommunications Technology Co., Ltd. MPSec MSG4000 security gateway has an arbitrary file download vulnerability.

Trust: 0.6

sources: CNVD: CNVD-2023-78254

DESCRIPTION

Maipu Communication Technology Co., Ltd. was established in 1993 and is a leading domestic supplier of network products and solutions. Maipu Telecom Technology Co., Ltd.'s MPSec MSG4000 security gateway has an arbitrary file download vulnerability that allows attackers to exploit the vulnerability to obtain sensitive information.

Trust: 0.6

sources: CNVD: CNVD-2023-78254

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2023-78254

AFFECTED PRODUCTS

vendor:maipu communicationmodel:mpsec msg4000 security gatewayscope: - version: -

Trust: 0.6

sources: CNVD: CNVD-2023-78254

CVSS

SEVERITY

CVSSV2

CVSSV3

CNVD: CNVD-2023-78254
value: MEDIUM

Trust: 0.6

CNVD: CNVD-2023-78254
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

sources: CNVD: CNVD-2023-78254

EXTERNAL IDS

db:CNVDid:CNVD-2023-78254

Trust: 0.6

sources: CNVD: CNVD-2023-78254

SOURCES

db:CNVDid:CNVD-2023-78254

LAST UPDATE DATE

2023-11-21T05:35:52.372000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2023-78254date:2023-10-19T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2023-78254date:2023-09-16T00:00:00