CVE-2010-4733: Critical severity Intellicom Netbiter Easyconnect Ec150 vulnerability

Published Feb 14, 2011

Updated

WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms have a default username and password, which makes it easier for remote attackers to obtain superadmin access via the web interface, a different vulnerability than CVE-2009-4463.

Affected Software

7 affected components

Intellicom Netbiter Easyconnect Ec150

Intellicom Netbiter Modbus Rtu-tcp Gateway Mb100

Intellicom Netbiter Serial Ethernet Server Ss100

Intellicom Netbiter Webscada Ws100

Intellicom Netbiter Webscada Ws200

Intellicom NetBiter NB100

Intellicom Netbiter Nb200

Event History

Feb 14, 2011

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Feb 15, 2011

Data Sourced

01:00 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-4733?

CVE-2010-4733 has a standard CVSS score indicating it poses a serious risk due to default passwords allowing unauthorized access.

How do I fix CVE-2010-4733?

To fix CVE-2010-4733, change the default username and password on affected devices to strong, unique credentials.

Which products are impacted by CVE-2010-4733?

CVE-2010-4733 affects IntelliCom NetBiter EasyConnect EC150, Modbus RTU-TCP Gateway MB100, Serial Ethernet Server SS100, WebSCADA WS100, WebSCADA WS200, and NetBiter NB100 and NB200.

What can attackers do with CVE-2010-4733?

Attackers exploiting CVE-2010-4733 can gain superadmin access to the devices via the web interface, leading to potential control over the systems.

Is patching available for CVE-2010-4733?

No specific patch is provided for CVE-2010-4733; the recommended mitigation is to change the default credentials.