CVE-2010-4730: Path Traversal

Published Feb 14, 2011

Updated

Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the page parameter, a different vulnerability than CVE-2009-4463.

Affected Software

7 affected components

Intellicom Netbiter Easyconnect Ec150

Intellicom Netbiter Modbus Rtu-tcp Gateway Mb100

Intellicom Netbiter Serial Ethernet Server Ss100

Intellicom Netbiter Webscada Ws100

Intellicom Netbiter Webscada Ws200

Intellicom NetBiter NB100

Intellicom Netbiter Nb200

Event History

Feb 14, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Feb 15, 2011

Data Sourced

01:00 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-4730?

CVE-2010-4730 has been rated as a medium severity vulnerability due to its potential to allow unauthorized file access.

How do I fix CVE-2010-4730?

The recommended fix for CVE-2010-4730 is to apply the latest firmware updates provided by IntelliCom for the affected devices.

Which products are affected by CVE-2010-4730?

CVE-2010-4730 affects several products including IntelliCom NetBiter Easyconnect EC150, Modbus RTU-TCP Gateway MB100, and the NB100 and NB200 platforms.

What type of attack does CVE-2010-4730 enable?

CVE-2010-4730 enables remote authenticated administrators to exploit directory traversal to read arbitrary files on the system.

Is authentication required to exploit CVE-2010-4730?

Yes, CVE-2010-4730 requires remote authenticated access to exploit the vulnerability.