ICSA-10-316-01A

icsaUScisa_csaf_ot

Intellicom NetBiter WebSCADA Vulnerabilities

view advisory published 2010-08-15

This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2010-4733UShigh10.0OT elevated—
WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default u…
CVE-2010-4732UShigh9.0—
cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platfo…
CVE-2010-4731USmedium6.8—
Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the I…
CVE-2010-4730USmedium6.8—
Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the Intel…
02

references

External citations — patches, advisories, analysis.

03

remediations (20)

  • MitigationEasy Connect (EC150)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationEasy Connect (EC150)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationEasy Connect (EC150)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationEasy Connect (EC150)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationModbus RTU – TCP Gateway (MB100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationModbus RTU – TCP Gateway (MB100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationModbus RTU – TCP Gateway (MB100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationModbus RTU – TCP Gateway (MB100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationSerial Ethernet Server (SS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationSerial Ethernet Server (SS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationSerial Ethernet Server (SS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationSerial Ethernet Server (SS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS100)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS200)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS200)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS200)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

  • MitigationWebSCADA (WS200)

    The default user in NetBiter products has superadmin privileges. Therefore, it is strongly recommended that users change the default password immediately when commissioning the product. In addition, users are advised to provide only the necessary privileges to non-administrator users of the product (least privileges mode of operation).

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan