CVE-2010-4730

2022-10-0316:21:06

CWE-22

[email protected]

web.nvd.nist.gov

vulnerability

directory traversal

webscada

easy connect

modbus rtu

tcp gateway

serial ethernet server

intellicom

netbiter

nb100

nb200

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

6.1 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a … (dot dot) in the page parameter, a different vulnerability than CVE-2009-4463.

Affected configurations

NVD

Node

intellicomnetbiter_easyconnect_ec150

intellicomnetbiter_modbus_rtu-tcp_gateway_mb100

intellicomnetbiter_serial_ethernet_server_ss100

intellicomnetbiter_webscada_ws100

intellicomnetbiter_webscada_ws200

AND

intellicomnetbiter_nb100

intellicomnetbiter_nb200

CPENameOperatorVersion
intellicom:netbiter_easyconnect_ec150intellicom netbiter easyconnect ec150eq*
intellicom:netbiter_modbus_rtu-tcp_gateway_mb100intellicom netbiter modbus rtu-tcp gateway mb100eq*
intellicom:netbiter_serial_ethernet_server_ss100intellicom netbiter serial ethernet server ss100eq*
intellicom:netbiter_webscada_ws100intellicom netbiter webscada ws100eq*
intellicom:netbiter_webscada_ws200intellicom netbiter webscada ws200eq*
intellicom:netbiter_nb100intellicom netbiter nb100eq*
intellicom:netbiter_nb200intellicom netbiter nb200eq*

CPE	Name	Operator	Version
intellicom:netbiter_easyconnect_ec150	intellicom netbiter easyconnect ec150	eq	*
intellicom:netbiter_modbus_rtu-tcp_gateway_mb100	intellicom netbiter modbus rtu-tcp gateway mb100	eq	*
intellicom:netbiter_serial_ethernet_server_ss100	intellicom netbiter serial ethernet server ss100	eq	*
intellicom:netbiter_webscada_ws100	intellicom netbiter webscada ws100	eq	*
intellicom:netbiter_webscada_ws200	intellicom netbiter webscada ws200	eq	*
intellicom:netbiter_nb100	intellicom netbiter nb100	eq	*
intellicom:netbiter_nb200	intellicom netbiter nb200	eq	*