'; } else{ echo ''; } echo 'Hillstone Networks'; } elseif ($_SERVER[HTTP_HOST] == "update1.huaantech.com.cn") { echo ''; echo 'huaantech'; } elseif ($_SERVER[HTTP_HOST] == "update1.dcnetworks.com.cn") { echo ''; echo 'dcnetworks'; } elseif ($_SERVER[HTTP_HOST] == "update1.w-ibeda.com") { if (false===strpos($_SERVER[REQUEST_URI],"/en/")) echo ''; else echo ''; echo 'w-ibeda'; } elseif ($_SERVER[HTTP_HOST] == "update1.hp-telecom.com") { echo ''; echo 'hp-telecom'; } elseif ($_SERVER[HTTP_HOST] == "update1.maipu.com") { echo ''; echo 'Maipu'; } elseif ($_SERVER[HTTP_HOST] == "update1.ncurity.com") { echo ''; echo 'Ncurity'; } elseif ($_SERVER[HTTP_HOST] == "update1.socusnetwork.com") { echo ''; echo 'Socusnetwork'; } else{ echo ''; echo 'Hillstone Networks'; } ?>
 
   
 

vul_app:qunjie_seal_iot_management_platform_rest_passwd_reset_vulnerability(Rule ID:1070210353)

Release Date2025/9/15

Rule NameQunjie Seal IoT Management Platform rest Password Reset Vulnerability

Severity:high

CVE ID

 

Descripiton

The Qunjie Seal IoT Management Platform is an intelligent seal management solution developed by Jiangsu Qunjie IoT Technology Co., Ltd. This platform utilizes IoT technology to provide full lifecycle management of seals, covering various stages such as seal application, collection, return, and destruction. The Qunjie Seal IoT management platform has a REST account password reset vulnerability, which attackers can exploit to reset REST account passwords. This rule supports to defend the A6: Vulnerable and Outdated Components of OWASP Top 10 - 2021.
Other reference:None

 

Solution

Update vendor patches.