Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.
[
{
"product": "TELEM GW6",
"vendor": "Martem",
"versions": [
{
"status": "affected",
"version": "2018.04.18-linux_4-01-601cb47 and prior"
}
]
},
{
"product": "TELEM GWM",
"vendor": "Martem",
"versions": [
{
"status": "affected",
"version": "2018.04.18-linux_4-01-601cb47 and prior"
}
]
}
]