Sign-up

ID

VAR-201102-0197


CVE

CVE-2010-4730


TITLE

WebSCADA Multiple products cgi-bin/read.cgi Directory Traversal Vulnerability

Trust: 1.6

sources: IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1 // IVD: 47bc253a-2355-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-6679 // CNNVD: CNNVD-201102-225

DESCRIPTION

Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the page parameter, a different vulnerability than CVE-2009-4463. IntelliCom NetBiter NB100 and NB200 Multiple running on the platform IntelliCom Product cgi-bin/read.cgi Contains a directory traversal vulnerability

Trust: 3.33

sources: NVD: CVE-2010-4730 // CERT/CC: VU#114560 // JVNDB: JVNDB-2011-001681 // CNVD: CNVD-2011-6679 // IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1 // IVD: 47bc253a-2355-11e6-abef-000c29c66e3d // VULHUB: VHN-47335

IOT TAXONOMY

category:['ICS']sub_category: -

Trust: 1.0

sources: IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1 // IVD: 47bc253a-2355-11e6-abef-000c29c66e3d // CNVD: CNVD-2011-6679

AFFECTED PRODUCTS

vendor:intellicommodel:netbiter serial ethernet server ss100scope:eqversion:*

Trust: 1.0

vendor:intellicommodel:netbiter webscada ws100scope:eqversion:*

Trust: 1.0

vendor:intellicommodel:netbiter easyconnect ec150scope:eqversion:*

Trust: 1.0

vendor:intellicommodel:netbiter nb100scope:eqversion:*

Trust: 1.0

vendor:intellicommodel:netbiter modbus rtu-tcp gateway mb100scope:eqversion:*

Trust: 1.0

vendor:intellicommodel:netbiter nb200scope:eqversion:*

Trust: 1.0

vendor:intellicommodel:netbiter webscada ws200scope:eqversion:*

Trust: 1.0

vendor:intellicom innovation abmodel: - scope: - version: -

Trust: 0.8

vendor:intellicom innovation abmodel:netbiter easy connect ec150scope: - version: -

Trust: 0.8

vendor:intellicom innovation abmodel:netbiter modbus rtu - tcp gateway mb100scope: - version: -

Trust: 0.8

vendor:intellicom innovation abmodel:netbiter serial ethernet server ss100scope: - version: -

Trust: 0.8

vendor:intellicom innovation abmodel:netbiter webscada ws100scope: - version: -

Trust: 0.8

vendor:intellicom innovation abmodel:netbiter webscada ws200scope: - version: -

Trust: 0.8

vendor:intellicommodel:netbiter nb200scope: - version: -

Trust: 0.6

vendor:intellicommodel:netbiter webscada ws200scope: - version: -

Trust: 0.6

vendor:intellicommodel:netbiter easyconnect ec150scope: - version: -

Trust: 0.6

vendor:intellicommodel:netbiter serial ethernet server ss100scope: - version: -

Trust: 0.6

vendor:intellicommodel:netbiter modbus rtu-tcp gateway mb100scope: - version: -

Trust: 0.6

vendor:intellicommodel:netbiter webscada ws100scope: - version: -

Trust: 0.6

vendor:netbiter easyconnect ec150model: - scope:eqversion:*

Trust: 0.4

vendor:netbiter modbus rtu tcp gateway mb100model: - scope:eqversion:*

Trust: 0.4

vendor:netbiter serial ethernet server ss100model: - scope:eqversion:*

Trust: 0.4

vendor:netbiter webscada ws100model: - scope:eqversion:*

Trust: 0.4

vendor:netbiter webscada ws200model: - scope:eqversion:*

Trust: 0.4

vendor:netbiter nb100model: - scope:eqversion:*

Trust: 0.4

vendor:netbiter nb200model: - scope:eqversion:*

Trust: 0.4

sources: IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1 // IVD: 47bc253a-2355-11e6-abef-000c29c66e3d // CERT/CC: VU#114560 // CNVD: CNVD-2011-6679 // JVNDB: JVNDB-2011-001681 // CNNVD: CNNVD-201102-225 // NVD: CVE-2010-4730

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2010-4730
value: MEDIUM

Trust: 1.0

CARNEGIE MELLON: VU#114560
value: 1.68

Trust: 0.8

NVD: CVE-2010-4730
value: MEDIUM

Trust: 0.8

CNVD: CNVD-2011-6679
value: MEDIUM

Trust: 0.6

CNNVD: CNNVD-201102-225
value: MEDIUM

Trust: 0.6

IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1
value: MEDIUM

Trust: 0.2

IVD: 47bc253a-2355-11e6-abef-000c29c66e3d
value: MEDIUM

Trust: 0.2

VULHUB: VHN-47335
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2010-4730
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:L/AU:S/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

CNVD: CNVD-2011-6679
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:L/AU:S/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:L/AU:S/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

IVD: 47bc253a-2355-11e6-abef-000c29c66e3d
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:L/AU:S/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.9 [IVD]

Trust: 0.2

VULHUB: VHN-47335
severity: MEDIUM
baseScore: 6.8
vectorString: AV:N/AC:L/AU:S/C:C/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.0
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1 // IVD: 47bc253a-2355-11e6-abef-000c29c66e3d // CERT/CC: VU#114560 // CNVD: CNVD-2011-6679 // VULHUB: VHN-47335 // JVNDB: JVNDB-2011-001681 // CNNVD: CNNVD-201102-225 // NVD: CVE-2010-4730

PROBLEMTYPE DATA

problemtype:CWE-22

Trust: 1.9

sources: VULHUB: VHN-47335 // JVNDB: JVNDB-2011-001681 // NVD: CVE-2010-4730

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201102-225

TYPE

Path traversal

Trust: 1.0

sources: IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1 // IVD: 47bc253a-2355-11e6-abef-000c29c66e3d // CNNVD: CNNVD-201102-225

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-001681

PATCH
title:Top Pageurl:http://support.intellicom.se
Trust: 0.8
title:WebSCADA multiple products cgi-bin/read.cgi directory traversal vulnerability patchurl:https://www.cnvd.org.cn/patchInfo/show/36987
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2011-6679 // 
            
            
            
            JVNDB: JVNDB-2011-001681

EXTERNAL IDS
db:NVDid:CVE-2010-4730
Trust: 3.5
db:ICS CERTid:ICSA-10-316-01A
Trust: 3.3
db:CERT/CCid:VU#114560
Trust: 3.3
db:CNNVDid:CNNVD-201102-225
Trust: 1.1
db:CNVDid:CNVD-2011-6679
Trust: 1.0
db:JVNDBid:JVNDB-2011-001681
Trust: 0.8
db:BUGTRAQid:20101001 [STANKOINFORMZASCHITA-10-01] NETBITER, WEBSCADA MULTIPLE VULNERABILITIES
Trust: 0.6
db:IVDid:7D7B090F-463F-11E9-91E5-000C29342CB1
Trust: 0.2
db:IVDid:47BC253A-2355-11E6-ABEF-000C29C66E3D
Trust: 0.2
db:VULHUBid:VHN-47335
Trust: 0.1
sources:
            
            
            IVD: 7d7b090f-463f-11e9-91e5-000c29342cb1 // 
            
            
            
            IVD: 47bc253a-2355-11e6-abef-000c29c66e3d // 
            
            
            
            CERT/CC: VU#114560 // 
            
            
            
            CNVD: CNVD-2011-6679 // 
            
            
            
            VULHUB: VHN-47335 // 
            
            
            
            JVNDB: JVNDB-2011-001681 // 
            
            
            
            CNNVD: CNNVD-201102-225 // 
            
            
            
            NVD: CVE-2010-4730

REFERENCES
url:http://www.us-cert.gov/control_systems/pdf/icsa-10-316-01a.pdf
Trust: 3.3
url:http://archives.neohapsis.com/archives/bugtraq/2010-10/0002.html
Trust: 2.5
url:http://www.kb.cert.org/vuls/id/114560
Trust: 2.5
url:http://support.intellicom.se
Trust: 0.8
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2010-4730
Trust: 0.8
url:http://jvn.jp/cert/jvnvu114560
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2010-4730
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/search-results?query=cve-2010-4730
Trust: 0.6
sources:
            
            
            CERT/CC: VU#114560 // 
            
            
            
            CNVD: CNVD-2011-6679 // 
            
            
            
            VULHUB: VHN-47335 // 
            
            
            
            JVNDB: JVNDB-2011-001681 // 
            
            
            
            CNNVD: CNNVD-201102-225 // 
            
            
            
            NVD: CVE-2010-4730

SOURCES
db:IVDid:7d7b090f-463f-11e9-91e5-000c29342cb1
db:IVDid:47bc253a-2355-11e6-abef-000c29c66e3d
db:CERT/CCid:VU#114560
db:CNVDid:CNVD-2011-6679
db:VULHUBid:VHN-47335
db:JVNDBid:JVNDB-2011-001681
db:CNNVDid:CNNVD-201102-225
db:NVDid:CVE-2010-4730

LAST UPDATE DATE
2025-04-11T23:05:54.608000+00:00

SOURCES UPDATE DATE
db:CERT/CCid:VU#114560date:2011-02-23T00:00:00
db:CNVDid:CNVD-2011-6679date:2011-02-16T00:00:00
db:VULHUBid:VHN-47335date:2011-02-15T00:00:00
db:JVNDBid:JVNDB-2011-001681date:2011-06-06T00:00:00
db:CNNVDid:CNNVD-201102-225date:2011-02-16T00:00:00
db:NVDid:CVE-2010-4730date:2025-04-11T00:51:21.963

SOURCES RELEASE DATE
db:IVDid:7d7b090f-463f-11e9-91e5-000c29342cb1date:2011-02-16T00:00:00
db:IVDid:47bc253a-2355-11e6-abef-000c29c66e3ddate:2011-02-16T00:00:00
db:CERT/CCid:VU#114560date:2011-02-03T00:00:00
db:CNVDid:CNVD-2011-6679date:2011-02-16T00:00:00
db:VULHUBid:VHN-47335date:2011-02-15T00:00:00
db:JVNDBid:JVNDB-2011-001681date:2011-06-06T00:00:00
db:CNNVDid:CNNVD-201102-225date:2011-02-16T00:00:00
db:NVDid:CVE-2010-4730date:2011-02-15T01:00:01.477