CVE-2010-4732 cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote au...
HighCVSS 9.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to replace the logo page's GIF image file with a file containing this code, a different vulnerability than CVE-2009-4463.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intellicom netbiter easyconnect ec150 | All versions | No fix listed |
| intellicom netbiter modbus rtu-tcp gateway mb100 | All versions | No fix listed |
| intellicom netbiter serial ethernet server ss100 | All versions | No fix listed |
| intellicom netbiter webscada ws100 | All versions | No fix listed |
| intellicom netbiter webscada ws200 | All versions | No fix listed |
| intellicom netbiter nb100 | All versions | No fix listed |
| intellicom netbiter nb200 | All versions | No fix listed |
References
- 20101001 [STANKOINFORMZASCHITA-10-01] Netbiter, webSCADA multiple vulnerabilities exploit mailing-list
- VU#114560 third-party-advisory us-government-resource
- www.us-cert.gov us-government-resource