Easy7 Integrated Management Platform EUVD-2026-12531

Tiandy Easy7 Integrated Management Platform version up to 7.17.0 with /rest/preSetTemplate/getRecByTemplateId endpoint accessible. No authentication required against default configurations.

The CVSS v3.1 score of 7.3 (High) reflects significant risk with the attack vector being network-based (AV:N), low complexity (AC:L), no privileges required (PR:N), and no user interaction needed (UI:N), though impacts are limited to Low across confidentiality, integrity, and availability. The Exploit Maturity modifier (E:P) indicates a publicly available proof-of-concept, which dramatically increases exploitability. The Remediation Level is undefined (RL:X), suggesting no patch is currently available since the vendor did not respond to disclosure. While the CVSS score alone might classify this as high priority, the combination of public exploit availability, unauthenticated remote access, and vendor non-responsiveness elevates this to critical priority for organizations running affected versions. The limited CIA impact (all Low) suggests the SQL injection may be constrained by database permissions or query context, but this should not diminish urgency given the attack surface exposure and automation potential. This represents a genuine immediate risk requiring urgent attention, particularly in internet-facing deployments.

An unauthenticated remote attacker identifies an internet-exposed Tiandy Easy7 platform instance and crafts malicious HTTP requests to /rest/preSetTemplate/getRecByTemplateId with SQL injection payloads in the ID parameter, following the publicly available proof-of-concept from Feishu. The attacker extracts database credentials, user account information, or surveillance configuration data by manipulating SQL queries, potentially gaining insight into security infrastructure layouts or modifying access control policies. Given the low attack complexity and no authentication requirement, automated scanning tools could rapidly identify and exploit vulnerable instances across the internet.