Lucene search

MitreCVE-2010-4733

HistoryFeb 15, 2011 - 1:00 a.m.

CVE-2010-4733

2011-02-1501:00:01

CWE-255

mitre

web.nvd.nist.gov

cve-2010-4733

webscada

ws100

ws200

easy connect

ec150

modbus rtu

tcp gateway

mb100

serial ethernet server

ss100

intellicom

netbiter

nb100

nb200

default username

default password

remote attackers

superadmin access

web interface

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.013

Percentile

86.4%

JSON

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a different vulnerability than CVE-2009-4463.

Affected configurations

Nvd

Node

intellicomnetbiter_easyconnect_ec150

intellicomnetbiter_modbus_rtu-tcp_gateway_mb100

intellicomnetbiter_serial_ethernet_server_ss100

intellicomnetbiter_webscada_ws100

intellicomnetbiter_webscada_ws200

AND

intellicomnetbiter_nb100

intellicomnetbiter_nb200

VendorProductVersionCPE
intellicomnetbiter_easyconnect_ec150*cpe:2.3:h:intellicom:netbiter_easyconnect_ec150:*:*:*:*:*:*:*:*
intellicomnetbiter_modbus_rtu-tcp_gateway_mb100*cpe:2.3:h:intellicom:netbiter_modbus_rtu-tcp_gateway_mb100:*:*:*:*:*:*:*:*
intellicomnetbiter_serial_ethernet_server_ss100*cpe:2.3:h:intellicom:netbiter_serial_ethernet_server_ss100:*:*:*:*:*:*:*:*
intellicomnetbiter_webscada_ws100*cpe:2.3:h:intellicom:netbiter_webscada_ws100:*:*:*:*:*:*:*:*
intellicomnetbiter_webscada_ws200*cpe:2.3:h:intellicom:netbiter_webscada_ws200:*:*:*:*:*:*:*:*
intellicomnetbiter_nb100*cpe:2.3:h:intellicom:netbiter_nb100:*:*:*:*:*:*:*:*
intellicomnetbiter_nb200*cpe:2.3:h:intellicom:netbiter_nb200:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intellicom	netbiter_easyconnect_ec150	*	cpe:2.3:h:intellicom:netbiter_easyconnect_ec150::::::::
intellicom	netbiter_modbus_rtu-tcp_gateway_mb100	*	cpe:2.3:h:intellicom:netbiter_modbus_rtu-tcp_gateway_mb100::::::::
intellicom	netbiter_serial_ethernet_server_ss100	*	cpe:2.3:h:intellicom:netbiter_serial_ethernet_server_ss100::::::::
intellicom	netbiter_webscada_ws100	*	cpe:2.3:h:intellicom:netbiter_webscada_ws100::::::::
intellicom	netbiter_webscada_ws200	*	cpe:2.3:h:intellicom:netbiter_webscada_ws200::::::::
intellicom	netbiter_nb100	*	cpe:2.3:h:intellicom:netbiter_nb100::::::::
intellicom	netbiter_nb200	*	cpe:2.3:h:intellicom:netbiter_nb200::::::::

References

archives.neohapsis.com/archives/bugtraq/2010-10/0002.html

www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

Low

EPSS

0.013

Percentile

86.4%

JSON

Related for CVE-2010-4733