CVE-2009-4463: Critical severity intellicom netbiter webscada ws200 vulnerability
Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4463?
CVE-2009-4463 is a critical vulnerability that allows remote attackers to exploit default passwords in Intellicom NetBiter WebSCADA devices.
How do I fix CVE-2009-4463?
To fix CVE-2009-4463, change the default passwords on Intellicom NetBiter WebSCADA devices immediately.
What devices are affected by CVE-2009-4463?
CVE-2009-4463 affects multiple versions of Intellicom NetBiter WebSCADA firmware including versions 3.11.0 to 3.30.2.
What can attackers do with CVE-2009-4463?
Attackers can remotely modify network settings or cause a denial of service in systems vulnerable to CVE-2009-4463.
Is CVE-2009-4463 exploitable without user interaction?
Yes, CVE-2009-4463 can be exploited by remote attackers without requiring any user interaction.