VIRY.CZRADAR
sektor
téma
typ textu

← nejvýznamnější zprávy · všechny zprávy

poslední zpráva · zachyceno

SPOJENO PŘES CVE

Guangzhou Juan IoT Technology EseeCloud

Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-107617, CVE-2026-97858, CVE-2026-105664, Summary: Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras: Use of Hard-coded Credentials, Improperly Controlled Modification of Dynamically-Determined Object Attributes, Observable Response Discrepancy

Číst originál na NCSC-FI →

2 zprávy z 2 zdrojů · první · zachyceno CZ · EN/orig

Guangzhou Juan IoT Technology energetika telekomunikace doprava finance FI US

tg: zranitelnost tp: průmyslové systémy

CVE v události 3

CVEhodnoceníKEVEPSS
CVE-2026-105664 6.9 4.0 · icscert 5.3 3.1 · icscert – –
CVE-2026-107617 9.8 3.1 · icscert 9.3 4.0 · icscert – –
CVE-2026-97858 6.9 4.0 · icscert 5.3 3.1 · icscert – –

Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 9.8.

Jak se o tom psalo 2

  1. · zachyceno · NCSC-FI FI nadpis události

    Guangzhou Juan IoT Technology EseeCloud

    Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.8, CVEs: CVE-2026-107617, CVE-2026-97858, CVE-2026-105664, Summary: Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras: Use of Hard-coded Credentials, Improperly Controlled Modification of Dynamically-Determined Object Attributes, Observable Response Discrepancy

  2. · zachyceno · CISA Advisories US

    Guangzhou Juan IoT Technology EseeCloud

    View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain control over affected IP cameras. The following versions of Guangzhou Juan IoT Technology EseeCloud are affected: EseeCloud App <=4.9.6 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664) EseeCloud Firmware <=4.9.86.0 (CVE-2026-107617, CVE-2026-97858, CVE-2026-105664) CVSS Vendor Equipment v3 9.8 Guangzhou Juan IoT Technology Co., Ltd. EseeCloud App 3 Vulnerabilities Use of Hard-coded Credentials,…