Authentication flaw

2018-07-3117:29:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.6%

JSON

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.

CPENameOperatorVersion
telem-gw6_firmwareeq<= 2018.4.18linux41601cb47
telem-gwm_firmwareeq<= 2018.4.18linux41601cb47

CPE	Name	Operator	Version
	telem-gw6_firmware	eq	<= 2018.4.18linux41601cb47
	telem-gwm_firmware	eq	<= 2018.4.18linux41601cb47

References

www.securityfocus.com/bid/104286

ics-cert.us-cert.gov/advisories/ICSA-18-142-01