CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
86.4%
cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to replace the logo page’s GIF image file with a file containing this code, a different vulnerability than CVE-2009-4463.
Vendor | Product | Version | CPE |
---|---|---|---|
intellicom | netbiter_easyconnect_ec150 | * | cpe:2.3:h:intellicom:netbiter_easyconnect_ec150:*:*:*:*:*:*:*:* |
intellicom | netbiter_modbus_rtu-tcp_gateway_mb100 | * | cpe:2.3:h:intellicom:netbiter_modbus_rtu-tcp_gateway_mb100:*:*:*:*:*:*:*:* |
intellicom | netbiter_serial_ethernet_server_ss100 | * | cpe:2.3:h:intellicom:netbiter_serial_ethernet_server_ss100:*:*:*:*:*:*:*:* |
intellicom | netbiter_webscada_ws100 | * | cpe:2.3:h:intellicom:netbiter_webscada_ws100:*:*:*:*:*:*:*:* |
intellicom | netbiter_webscada_ws200 | * | cpe:2.3:h:intellicom:netbiter_webscada_ws200:*:*:*:*:*:*:*:* |
intellicom | netbiter_nb100 | * | cpe:2.3:h:intellicom:netbiter_nb100:*:*:*:*:*:*:*:* |
intellicom | netbiter_nb200 | * | cpe:2.3:h:intellicom:netbiter_nb200:*:*:*:*:*:*:*:* |