CVE-2018-10603

🗓️ 31 Jul 2018 17:00:00Reported by icscertType

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, allowing remote control

Reporter	Title	Published	Views	Family All 6
CNVD	Martem TELEM-GW6/GWM Critical Function Missing Authentication Vulnerability	28 May 201800:00	–	cnvd
Cvelist	CVE-2018-10603	31 Jul 201817:00	–	cvelist
EUVD	EUVD-2018-2675	7 Oct 202500:30	–	euvd
ICS	Martem TELEM-GW6/GWM (Update B)	22 May 201800:00	–	ics
NVD	CVE-2018-10603	31 Jul 201817:29	–	nvd
Prion	Authentication flaw	31 Jul 201817:29	–	prion

NVD

Vulners

Node

martem telem-gwm_firmwareRange≤2018.04.18-linux_4-01-601cb47

AND

martem telem-gwmMatch-

Node

martem telem-gw6_firmwareRange≤2018.04.18-linux_4-01-601cb47

AND

martem telem-gw6Match-

[
  {
    "product": "TELEM GW6",
    "vendor": "Martem",
    "versions": [
      {
        "status": "affected",
        "version": "2018.04.18-linux_4-01-601cb47 and prior"
      }
    ]
  },
  {
    "product": "TELEM GWM",
    "vendor": "Martem",
    "versions": [
      {
        "status": "affected",
        "version": "2018.04.18-linux_4-01-601cb47 and prior"
      }
    ]
  }
]

Source	Link
securityfocus	www.securityfocus.com/bid/104286
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-18-142-01

21 Nov 2024 03:41Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 39.8

EPSS0.01603