CVE-2009-4463

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

🔗 References (12)

• cve@mitrehttp://blog.48bits.com/?p=781
• cve@mitrehttp://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1
• cve@mitrehttp://support.intellicom.se/getfile.cfm?FID=151
• cve@mitrehttp://www.kb.cert.org/vuls/id/902793
• cve@mitrehttp://www.osvdb.org/61506
• cve@mitrehttp://www.securityfocus.com/archive/1/508449/100/0/threaded
• af854a3a-2127-422b-91ae-364da2661108http://blog.48bits.com/?p=781
• af854a3a-2127-422b-91ae-364da2661108http://reversemode.com/index.php?option=com_content&task=view&id=65&Itemid=1
• af854a3a-2127-422b-91ae-364da2661108http://support.intellicom.se/getfile.cfm?FID=151
• af854a3a-2127-422b-91ae-364da2661108http://www.kb.cert.org/vuls/id/902793
• af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/61506
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/508449/100/0/threaded