Lucene search

[email protected]CVE-2010-4731

HistoryOct 03, 2022 - 4:21 p.m.

CVE-2010-4731

2022-10-0316:21:05

CWE-22

[email protected]

web.nvd.nist.gov

cve-2010-4731

absolute path traversal

webscada

remote authenticated

file read

intellicom netbiter

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a full pathname in the file parameter, a different vulnerability than CVE-2009-4463.

Affected configurations

NVD

Node

intellicomnetbiter_easyconnect_ec150

intellicomnetbiter_modbus_rtu-tcp_gateway_mb100

intellicomnetbiter_serial_ethernet_server_ss100

intellicomnetbiter_webscada_ws100

intellicomnetbiter_webscada_ws200

AND

intellicomnetbiter_nb100

intellicomnetbiter_nb200

CPENameOperatorVersion
intellicom:netbiter_easyconnect_ec150intellicom netbiter easyconnect ec150eq*
intellicom:netbiter_modbus_rtu-tcp_gateway_mb100intellicom netbiter modbus rtu-tcp gateway mb100eq*
intellicom:netbiter_serial_ethernet_server_ss100intellicom netbiter serial ethernet server ss100eq*
intellicom:netbiter_webscada_ws100intellicom netbiter webscada ws100eq*
intellicom:netbiter_webscada_ws200intellicom netbiter webscada ws200eq*
intellicom:netbiter_nb100intellicom netbiter nb100eq*
intellicom:netbiter_nb200intellicom netbiter nb200eq*

CPE	Name	Operator	Version
intellicom:netbiter_easyconnect_ec150	intellicom netbiter easyconnect ec150	eq	*
intellicom:netbiter_modbus_rtu-tcp_gateway_mb100	intellicom netbiter modbus rtu-tcp gateway mb100	eq	*
intellicom:netbiter_serial_ethernet_server_ss100	intellicom netbiter serial ethernet server ss100	eq	*
intellicom:netbiter_webscada_ws100	intellicom netbiter webscada ws100	eq	*
intellicom:netbiter_webscada_ws200	intellicom netbiter webscada ws200	eq	*
intellicom:netbiter_nb100	intellicom netbiter nb100	eq	*
intellicom:netbiter_nb200	intellicom netbiter nb200	eq	*

References

archives.neohapsis.com/archives/bugtraq/2010-10/0002.html

www.kb.cert.org/vuls/id/114560

www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

6.2 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

JSON

Related for CVE-2010-4731

cvelist5 nvd5 prion5 cve4 cert1