RULE(RULE ID:331169)

Rule General Information
Release Date: 2020-09-11
Rule Name: QiZhi Bastion Machine Command Execution Vulnerability -1
Severity:
CVE ID:
Rule Protection Details
Description: Zhejiang Qizhi Technology Co., Ltd. is a company mainly engaged in the technical development of computer software and hardware and network products.There is a command execution vulnerability in the server of the Qizhi operation and maintenance bastion host. Attackers can use this vulnerability to obtain server permissions.
Impact: An attacker can execute arbitrary command via a successful exploit in the context of the vulnerable software.
Affected OS: Windows
Reference: https://www.cnvd.org.cn/flaw/show/CNVD-2019-20835
Solutions
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.