Description
A vulnerability, which was classified as critical, has been found in Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 up to 20240805. This issue affects some unknown processing of the file /report/ParkChargeRecord/GetDataList. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Anhui Deshun Intelligent Technology | Jieshun JieLink+ JSOTC2016 | 20240805 | — |
References
- VDB-275069 | Anhui Deshun Intelligent Technology Jieshun JieLink+ JSOTC2016 GetDataList access control vdb-entry
- VDB-275069 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #387124 | 安徽德顺智能科技有限公司 JIELINK+ INTELLIGENT TERMINAL OPERATION PLATROFM JSOTC2016 fJeLink+ Improper Access Controls third-party-advisory
- https://wiki.shikangsi.com/post/share/fd390bd7-2d60-4ffb-87da-f72cc900f61c exploit