Lucene search

K
cve[email protected]CVE-2009-4463
HistoryDec 30, 2009 - 8:00 p.m.

CVE-2009-4463

2009-12-3020:00:01
CWE-255
web.nvd.nist.gov
18
cve-2009-4463
intellicom
netbiter
webscada
default passwords
hicp
remote attackers
denial of service

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product’s installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Affected configurations

NVD
Node
intellicomnetbiter_webscada_firmwareMatch3.11.0
OR
intellicomnetbiter_webscada_firmwareMatch3.11.1
OR
intellicomnetbiter_webscada_firmwareMatch3.11.2
OR
intellicomnetbiter_webscada_firmwareMatch3.12.4
OR
intellicomnetbiter_webscada_firmwareMatch3.12.6
OR
intellicomnetbiter_webscada_firmwareMatch3.13.0beta
OR
intellicomnetbiter_webscada_firmwareMatch3.13.1
OR
intellicomnetbiter_webscada_firmwareMatch3.13.2
OR
intellicomnetbiter_webscada_firmwareMatch3.20.0
OR
intellicomnetbiter_webscada_firmwareMatch3.30.0
OR
intellicomnetbiter_webscada_firmwareMatch3.30.1
OR
intellicomnetbiter_webscada_firmwareMatch3.30.2b184
AND
intellicomnetbiter_webscada_ws100
OR
intellicomnetbiter_webscada_ws200

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.3 Medium

AI Score

Confidence

Low

0.012 Low

EPSS

Percentile

84.9%

Related for CVE-2009-4463