Lucene search

K
nvd[email protected]NVD:CVE-2009-4463
HistoryDec 30, 2009 - 8:00 p.m.

CVE-2009-4463

2009-12-3020:00:01
CWE-255
web.nvd.nist.gov
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product’s installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Affected configurations

NVD
Node
intellicomnetbiter_webscada_firmwareMatch3.11.0
OR
intellicomnetbiter_webscada_firmwareMatch3.11.1
OR
intellicomnetbiter_webscada_firmwareMatch3.11.2
OR
intellicomnetbiter_webscada_firmwareMatch3.12.4
OR
intellicomnetbiter_webscada_firmwareMatch3.12.6
OR
intellicomnetbiter_webscada_firmwareMatch3.13.0beta
OR
intellicomnetbiter_webscada_firmwareMatch3.13.1
OR
intellicomnetbiter_webscada_firmwareMatch3.13.2
OR
intellicomnetbiter_webscada_firmwareMatch3.20.0
OR
intellicomnetbiter_webscada_firmwareMatch3.30.0
OR
intellicomnetbiter_webscada_firmwareMatch3.30.1
OR
intellicomnetbiter_webscada_firmwareMatch3.30.2b184
AND
intellicomnetbiter_webscada_ws100
OR
intellicomnetbiter_webscada_ws200

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Related for NVD:CVE-2009-4463