PT-2011-1683 · Serial Ethernet Server+4 · Serial Ethernet Server+4

Publicado 2011-02-14 · Atualizado 2011-02-15 · CVE-2010-4733

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions (affected versions not specified) Easy Connect EC150 versions (affected versions not specified) Modbus RTU - TCP Gateway MB100 versions (affected versions not specified) Serial Ethernet Server SS100 versions (affected versions not specified) IntelliCom NetBiter NB100 and NB200 platforms versions (affected versions not specified)

Description The issue is related to default credentials, specifically a default username and password, which can be exploited by remote attackers to gain superadmin access through the web interface.

Recommendations For WebSCADA WS100 and WS200, change the default username and password to secure credentials. For Easy Connect EC150, update the default login credentials to prevent unauthorized access. For Modbus RTU - TCP Gateway MB100, modify the default authentication settings to use strong passwords. For Serial Ethernet Server SS100, replace the default username and password with unique and secure credentials. For IntelliCom NetBiter NB100 and NB200 platforms, ensure that all default passwords are changed to strong and unique passwords to prevent exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-4733

Produtos afetados

Easy Connect

Intellicom Netbiter

Modbus Rtu - Tcp Gateway

Serial Ethernet Server

Webscada

Referências · 3

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2010-10/0002.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4733 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdf · Nota