CVE-2010-4732: Code Injection

Published Feb 14, 2011

Updated

cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to replace the logo page's GIF image file with a file containing this code, a different vulnerability than CVE-2009-4463.

Affected Software

7 affected components

Intellicom Netbiter Easyconnect Ec150

Intellicom Netbiter Modbus Rtu-tcp Gateway Mb100

Intellicom Netbiter Serial Ethernet Server Ss100

Intellicom Netbiter Webscada Ws100

Intellicom Netbiter Webscada Ws200

Intellicom NetBiter NB100

Intellicom Netbiter Nb200

Event History

Feb 14, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Feb 15, 2011

Data Sourced

01:00 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-4732?

CVE-2010-4732 is classified as a high severity vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2010-4732?

To remediate CVE-2010-4732, you should apply the latest firmware updates provided by IntelliCom for the affected devices.

Who is affected by CVE-2010-4732?

CVE-2010-4732 affects several IntelliCom products, including the NetBiter Easy Connect EC150, Modbus RTU-TCP Gateway MB100, and more.

What type of vulnerability is CVE-2010-4732?

CVE-2010-4732 is a remote code execution vulnerability that can be exploited by authenticated administrators.

What could happen if CVE-2010-4732 is exploited?

If exploited, CVE-2010-4732 could allow an attacker to execute arbitrary code on the vulnerable devices, potentially compromising their functionality.