RULE(RULE ID:338481)

Rule General Information
Release Date: 2024-10-22
Rule Name: Streamax Mangrove System Arbitrary User Creates Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Streamax Technology is a commercial vehicle Intelligent Internet of Things (AIOT) solution provider focused on AI and video technologies. There is an arbitrary user creation vulnerability in the Mangrovex system of Ruiming Technology. Due to the improper control of interface rights, attackers can create any user through this vulnerability, including administrators. This rule detects the suspicious administrator privilege user creation behavior, please confirm whether the creation behavior is an internal legal operation.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.