CVE-2022-47703

Published: Feb 16, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

TIANJIE CPE906-3 is vulnerable to password disclosure. This is present on Software Version WEB5.0_LCD_20200513, Firmware Version MV8.003, and Hardware Version CPF906-V5.0_LCD_20200513.

Affected (2)

Products: Tianjie: Cpe906 3, Cpe906 3 Firmware

Tianjie

2 products

Cpe906 3

Cpe906 3 Firmware

Configuration A

2 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tianjie Cpe906 3	Version web5.0_lcd_20200513
Tianjie Cpe906 3 Firmware	Version mv8.003

Running on/with	Platform Versions
Tianjie Cpe906 3	Version cpf906-v5.0_lcd_20200513

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://github.com/OlivierLaflamme/cve/blob/main/TIANJIE/CPE906-3/unauth_password_disclosure.md

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/OlivierLaflamme/cve/blob/main/TIANJIE/CPE906-3/unauth_password_disclosure.md

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.