CVE-2010-4731: Path Traversal

Published Feb 14, 2011

Updated

Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a full pathname in the file parameter, a different vulnerability than CVE-2009-4463.

Affected Software

7 affected components

Intellicom Netbiter Easyconnect Ec150

Intellicom Netbiter Modbus Rtu-tcp Gateway Mb100

Intellicom Netbiter Serial Ethernet Server Ss100

Intellicom Netbiter Webscada Ws100

Intellicom Netbiter Webscada Ws200

Intellicom NetBiter NB100

Intellicom Netbiter Nb200

Event History

Feb 14, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Feb 15, 2011

Data Sourced

01:00 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-4731?

CVE-2010-4731 is classified as a high severity vulnerability due to its potential for arbitrary file access.

How do I fix CVE-2010-4731?

To fix CVE-2010-4731, ensure that your systems are updated with the latest patches provided by IntelliCom.

Which products are affected by CVE-2010-4731?

CVE-2010-4731 affects Intellicom NetBiter Easyconnect EC150, Modbus RTU - TCP Gateway MB100, Serial Ethernet Server SS100, WebSCADA WS100, WebSCADA WS200, NB100, and NB200.

Can CVE-2010-4731 be exploited remotely?

Yes, CVE-2010-4731 can be exploited remotely by authenticated administrators to read arbitrary files.

What type of vulnerability is CVE-2010-4731?

CVE-2010-4731 is an absolute path traversal vulnerability.