60 matches found
CVE-2010-4733: Undefined Security Weakness
WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a...
CVE-2010-4730: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...
CVE-2010-4732: Improper Control of Generation of Code
cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to...
IntelliCom NetBiter NB100 and NB200 platforms contain multiple vulnerabilities
Overview IntelliCom NetBiter products based on the NB100 and NB200 platforms contain multiple vulnerabilities. Description IntelliCom NetBiter products based on the NB100 and NB200 platforms contain multiple vulnerabilities. A user who has been authenticated at the superadmin level highest...
[STANKOINFORMZASCHITA-10-01] Netbiter® webSCADA multiple vulnerabilities
STANKOINFORMZASCHITA-10-01 Netbiter® webSCADA – multiple vulnerabilities Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of...
Netbiter webSCADA Disclosure
STANKOINFORMZASCHITA-10-01 Netbiter® webSCADA multiple vulnerabilities Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of...
Intellicom Netbiter webSCADA Products - read.cgi Multiple Remote Security Vulnerabilities
Intellicom Netbiter webSCADA Products - read.cgi Multiple Remote Security Vulnerabilities source: https://www.securityfocus.com/bid/43636/info Intellicom Netbiter webSCADA products are prone to multiple remote security vulnerabilities, including a directory-traversal vulnerability, an...
Intellicom Netbiter webSCADA Products - 'read.cgi' Multiple Remote Security Vulnerabilities
source: https://www.securityfocus.com/bid/43636/info Intellicom Netbiter webSCADA products are prone to multiple remote security vulnerabilities, including a directory-traversal vulnerability, an information-disclosure vulnerability, and an arbitrary-file-upload vulnerability. An attacker can...
Intellicom NetBiter WebSCADA Vulnerabilities
OVERVIEW This advisory is a follow-up to ICS-ALERT-10-293-01 - Intellicom NetBiter WebSCADA Vulnerabilities, published on the ICS-CERT Web page on October 20, 2010. On October 1, 2010 independent researchers identified vulnerabilities in the Intellicom NetBiter Supervisory Control and Data...
IntelliCom NetBiter devices have default HICP passwords
Overview IntelliCom NetBiter devices ship with default passwords for the HICP network configuration service. An attacker with network access could change network settings and prevent legitimate users from accessing the HICP service. Description IntelliCom NetBiter products use the proprietary HIC...
IntelliCom NetBiter Config HICP hostname buffer overflow
Overview The IntelliCom NetBiter Config HICP configuration utility has a buffer overflow vulnerability that can be triggered by a specially crafted hostname hn value. An attacker with network access could exploit this vulnerability to execute arbitrary code with the privileges of the user running...
IntelliCom NetBiter Config Utility Hostname Stack Buffer Overflow
Intellicom NetBiter webSCADA is an embedded SCADA Supervisory Control And Data Acquisition solution for various hardware devices, providing remote management through web browsers. NetBiter webSCADA ships with a configuration utility NetBiter Config used to enumerate and configure compatible devic...
CVE-2009-4463
Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...
CVE-2009-4462
Stack-based buffer overflow in the NetBiterConfig utility NetBiterConfig.exe 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn hostname parameter in a crafted HICP-protocol UDP packet...
Hardcoded credentials
Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...
CVE-2009-4463
Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...
CVE-2009-4463
CVE-2009-4463 affects Intellicom NetBiter NB100/NB200 platforms with WebSCADA WebSCADA/ HICP network configuration service. The authenticated vulnerability arises from using default/hard-coded credentials, enabling remote attackers to modify network settings and potentially cause denial of servic...
CVE-2009-4463: Undefined Security Weakness
Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in...
CVE-2009-4462: Improper Restriction of Operations within the Bounds of a Memory Buffer
Stack-based buffer overflow in the NetBiterConfig utility NetBiterConfig.exe 1.3.0 for Intellicom NetBiter WebSCADA allows remote attackers to execute arbitrary code via a long hn hostname parameter in a crafted HICP-protocol UDP packet...
