PT-2009-6584 · Intellicom · Intellicom Netbiter Webscada

Rubén Santamarta · Published 2009-12-30 · Updated 2018-10-10 · CVE-2009-4463

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intellicom NetBiter WebSCADA devices (affected versions not specified)

Description The issue concerns the use of default passwords for the HICP network configuration service in Intellicom NetBiter WebSCADA devices. This makes it easier for remote attackers to modify network settings and cause a denial of service. It is noted that this is only considered a vulnerability when the administrator does not follow the recommendations provided in the product's installation documentation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2009-4463

Affected Products

Intellicom Netbiter Webscada

References · 7

• 🔥 http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4463 · Security Note
• http://blog.48bits.com/?p=781 · Note
• http://osvdb.org/61506 · Note
• http://support.intellicom.se/getfile.cfm?FID=151 · Note
• http://securityfocus.com/archive/1/508449/100/0/threaded · Note
• http://kb.cert.org/vuls/id/902793 · Note