CVE-2025-65212 (CNNVD-202601-1014)
中文标题:
Nanjing Hanyuan HY511 POE 安全漏洞
英文标题:
An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerabilit...
漏洞描述
中文描述:
Nanjing Hanyuan HY511 POE是中国Nanjing Hanyuan公司的一款嵌入式智能显示面板。 Nanjing Hanyuan HY511 POE 2.1之前版本和plugins 0.1之前版本存在安全漏洞，该漏洞源于设备Cookie验证不足，可能导致攻击者下载核心配置文件并绕过前端后台登录页面。
英文描述:
An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the device management backend. By reading the corresponding username and self-decrypted MD5 password in the core configuration file, the attacker can directly log in to the backend, thereby bypassing the front-end backend login page.
CWE类型:
标签:
受影响产品
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.1 (adp)
CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-65212 |
2026-01-07 02:47:00 | 2026-01-12 02:12:21 |
| NVD | nvd_CVE-2025-65212 |
2026-01-09 03:00:08 | 2026-01-12 02:28:02 |
| CNNVD | cnnvd_CNNVD-202601-1014 |
2026-01-11 06:15:09 | 2026-01-12 02:38:11 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202601-1014
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- data_sources: ['cve'] -> ['cve', 'nvd']