NetComm Wireless 4G LTE Light Industrial M2M Router

🗓️ 09 Aug 2018 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 44 Views

NetComm Wireless 4G LTE Light Industrial M2M Router vulnerabilities and mitigation

Reporter	Title	Published	Views	Family All 29
BDU FSTEC	The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) relates to the disclosure of information, allowing a intruder to gain unauthorized access to protected data.	21 Aug 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) arises from the lack of measures taken to protect the website structure. This allows attackers to execute arbitrary JavaScript code in the user’s browser.	21 Aug 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) relates to the manipulation of inter-site requests, allowing a perpetrator to change the device’s password.	21 Aug 201800:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of the 4G LTE Light Industrial M2M Router (NWL-25) is related to insufficient protection of configuration data, allowing attackers to gain unauthorized access to protected data.	21 Aug 201800:00	–	bdu_fstec
CNVD	NetComm NWL-25 Cross-Site Scripting Vulnerability	13 Aug 201800:00	–	cnvd
CNVD	NetComm NWL-25 Device Directory Disclosure Vulnerability	13 Aug 201800:00	–	cnvd
CNVD	NetComm NWL-25 Information Disclosure Vulnerability	13 Aug 201800:00	–	cnvd
CNVD	NetComm NWL-25 Cross-Site Request Forgery Vulnerability	13 Aug 201800:00	–	cnvd
CVE	CVE-2018-14782	10 Aug 201819:00	–	cve
CVE	CVE-2018-14783	10 Aug 201819:00	–	cve

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsa-18-221-02.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-18-221-02
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

09 Aug 2018 00:00Current

8.4High risk

Vulners AI Score8.4

CVSS 26.8

CVSS 38.8

EPSS0.01116

information exposure cross-site request forgery cross-site scripting directory listing firmware update remote access security network isolation impact analysis cybersecurity guidance