Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the products installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Netbiter_webscada_firmware | Intellicom | 3.11.0 (including) | 3.11.0 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.11.1 (including) | 3.11.1 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.11.2 (including) | 3.11.2 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.12.4 (including) | 3.12.4 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.12.6 (including) | 3.12.6 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.13.0-beta (including) | 3.13.0-beta (including) |
| Netbiter_webscada_firmware | Intellicom | 3.13.1 (including) | 3.13.1 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.13.2 (including) | 3.13.2 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.20.0 (including) | 3.20.0 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.30.0 (including) | 3.30.0 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.30.1 (including) | 3.30.1 (including) |
| Netbiter_webscada_firmware | Intellicom | 3.30.2-b184 (including) | 3.30.2-b184 (including) |
References
- http://blog.48bits.com/?p=781
- http://reversemode.com/index.php?option=com_content\u0026task=view\u0026id=65\u0026Itemid=1
- http://support.intellicom.se/getfile.cfm?FID=151
- http://www.kb.cert.org/vuls/id/902793
- http://www.osvdb.org/61506
- http://www.securityfocus.com/archive/1/508449/100/0/threaded
- http://blog.48bits.com/?p=781
- http://reversemode.com/index.php?option=com_content\u0026task=view\u0026id=65\u0026Itemid=1
- http://support.intellicom.se/getfile.cfm?FID=151
- http://www.kb.cert.org/vuls/id/902793
- http://www.osvdb.org/61506
- http://www.securityfocus.com/archive/1/508449/100/0/threaded