Lucene search

IcscertCVE-2018-10605

HistoryOct 01, 2018 - 4:29 p.m.

CVE-2018-10605

2018-10-0116:29:00

CWE-276

CWE-1188

icscert

web.nvd.nist.gov

martem

telem gw6

gwm

security vulnerability

cve-2018-10605

unprivileged users

default credentials

system configuration

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

42.1%

JSON

Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU.

Affected configurations

Nvd

Node

martemtelem-gw6_firmwareRange<2.0.87-4018403-k4

AND

martemtelem-gw6Match-

Node

martemtelem-gwmMatch-

AND

martemtelem-gwm_firmwareRange<2.0.87-4018403-k4

VendorProductVersionCPE
martemtelem-gw6_firmware*cpe:2.3:o:martem:telem-gw6_firmware:*:*:*:*:*:*:*:*
martemtelem-gw6-cpe:2.3:h:martem:telem-gw6:-:*:*:*:*:*:*:*
martemtelem-gwm-cpe:2.3:h:martem:telem-gwm:-:*:*:*:*:*:*:*
martemtelem-gwm_firmware*cpe:2.3:o:martem:telem-gwm_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
martem	telem-gw6_firmware	*	cpe:2.3:o:martem:telem-gw6_firmware::::::::
martem	telem-gw6	-	cpe:2.3:h:martem:telem-gw6:-:::::::*
martem	telem-gwm	-	cpe:2.3:h:martem:telem-gwm:-:::::::*
martem	telem-gwm_firmware	*	cpe:2.3:o:martem:telem-gwm_firmware::::::::

CNA Affected

[
  {
    "product": "TELEM-GW6/GWM",
    "vendor": "Martem",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 2.0.87-4018403-k4"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-18-142-01

martem.eu/csa/Martem_CSA_Telem_1805183.pdf

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.001

Percentile

42.1%

JSON

Related for CVE-2018-10605