PT-2009-6584 · Intellicom · Intellicom Netbiter Webscada

Rubén Santamarta · Publicado 2009-12-30 · Atualizado 2018-10-10 · CVE-2009-4463

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intellicom NetBiter WebSCADA devices (affected versions not specified)

Description The issue concerns the use of default passwords for the HICP network configuration service in Intellicom NetBiter WebSCADA devices. This makes it easier for remote attackers to modify network settings and cause a denial of service. It is noted that this is only considered a vulnerability when the administrator does not follow the recommendations provided in the product's installation documentation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2009-4463

Produtos afetados

Intellicom Netbiter Webscada

Referências · 7

• 🔥 http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4463 · Nota de Segurança
• http://blog.48bits.com/?p=781 · Nota
• http://osvdb.org/61506 · Nota
• http://support.intellicom.se/getfile.cfm?FID=151 · Nota
• http://securityfocus.com/archive/1/508449/100/0/threaded · Nota
• http://kb.cert.org/vuls/id/902793 · Nota