Read the docs

Martem

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Martem records in CISA KEV

No Martem vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Telem-gw6 Firmware 4 records MEDIUM Telem-gwm Firmware 4 records MEDIUM

Records

4 records

TI-2018-07492 CVE-2018-10603 · GHSA-mpwv-79rv-2h5m

Missing authentication in Martem TELEM GW6

Priority MEDIUM 48

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03284 Published 2018-07-31 No fix listed CWE-306
TI-2018-07494 CVE-2018-10605 · GHSA-8mwr-27x6-vj6v

Incorrect default permissions in Martem TELEM-GW6/GWM

Priority MEDIUM 41

Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01484 Published 2018-10-01 Fixed in 2.0.87-4018403-k4 CWE-276
TI-2018-07496 CVE-2018-10607 · GHSA-v39j-f7jx-49hv

Uncontrolled resource consumption in Martem TELEM GW6

Priority LOW 39

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow the creation of new connections to one or more IOAs, without closing them properly, which may cause a denial of service within…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03158 Published 2018-07-31 No fix listed CWE-400
TI-2018-07498 CVE-2018-10609 · GHSA-4jgf-7332-wrp2

Cross-site scripting in Martem TELEM-GW6/GWM

Priority LOW 32

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code execution with target…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02304 Published 2018-07-31 No fix listed CWE-79
Open these records in search →