ByteOS Network

NVD Vulnerability Details :

CVE-2018-10605

Modified

Source-ics-cert@hq.dhs.gov

Published At-01 Oct, 2018 | 16:29

Updated At-09 Oct, 2019 | 23:32

Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	8.8	HIGH	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	9.0	HIGH	AV:N/AC:L/Au:S/C:C/I:C/A:C

CPE Matches

martem>>telem-gw6_firmware>>Versions before 2.0.87-4018403-k4(exclusive)

cpe:2.3:o:martem:telem-gw6_firmware:*:*:*:*:*:*:*:*

martem>>telem-gw6>>-

cpe:2.3:h:martem:telem-gw6:-:*:*:*:*:*:*:*

martem>>telem-gwm>>-

cpe:2.3:h:martem:telem-gwm:-:*:*:*:*:*:*:*

martem>>telem-gwm_firmware>>Versions before 2.0.87-4018403-k4(exclusive)

cpe:2.3:o:martem:telem-gwm_firmware:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-1188	Primary	nvd@nist.gov
CWE-276	Secondary	ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
https://ics-cert.us-cert.gov/advisories/ICSA-18-142-01	ics-cert@hq.dhs.gov	Mitigation Third Party Advisory US Government Resource
https://martem.eu/csa/Martem_CSA_Telem_1805183.pdf	ics-cert@hq.dhs.gov	Mitigation Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History