CVE-2017-6047

Detcon SiteWatch Gateway (all non-cellular versions) has a plaintext password exposure: passwords are stored in a file accessible without authentication. This CVE-2017-6047 is documented in multiple sources (NVD entry and ICS-CERT-related advisory context) and indicates an authentication weakness...

CVE-2017-6049

Detcon SiteWatch Gateway (all non-cellular versions) is affected by CVE-2017-6049. A remote attacker can edit device settings via a specially crafted URL due to improper authentication. CVSSv3 base score 9.1 (HIGH) with network access, no privileges required, and high integrity impact. ICS-CERT n...