CVE-2010-4732
Critical
Description
cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to replace the logo page's GIF image file with a file containing this code, a different vulnerability than CVE-2009-4463.
SeverityCritical
CVSS9.0
Exploit probability—
ProductIntellicom Netbiter Easyconnect
PublishedFeb 15, 2011
First seenFeb 15, 2011
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intellicom netbiter_easyconnect_ec150 | No range specified | — |
| intellicom netbiter_modbus_rtu-tcp_gateway_mb100 | No range specified | — |
| intellicom netbiter_serial_ethernet_server_ss100 | No range specified | — |
| intellicom netbiter_webscada_ws100 | No range specified | — |
| intellicom netbiter_webscada_ws200 | No range specified | — |
| intellicom netbiter_nb100 | No range specified | — |
| intellicom netbiter_nb200 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.