Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Martem Clear all filters
TI-2018-07494 CVE-2018-10605 · GHSA-8mwr-27x6-vj6v

Incorrect default permissions in Martem TELEM-GW6/GWM

Priority MEDIUM 41

Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01484 Published 2018-10-01 Fixed in 2.0.87-4018403-k4 CWE-276
TI-2018-07498 CVE-2018-10609 · GHSA-4jgf-7332-wrp2

Cross-site scripting in Martem TELEM-GW6/GWM

Priority LOW 32

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of data over a Websocket which may allow cross-site scripting and client-side code execution with target…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02304 Published 2018-07-31 No fix listed CWE-79
TI-2018-07496 CVE-2018-10607 · GHSA-v39j-f7jx-49hv

Uncontrolled resource consumption in Martem TELEM GW6

Priority LOW 39

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow the creation of new connections to one or more IOAs, without closing them properly, which may cause a denial of service within…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03158 Published 2018-07-31 No fix listed CWE-400
TI-2018-07492 CVE-2018-10603 · GHSA-mpwv-79rv-2h5m

Missing authentication in Martem TELEM GW6

Priority MEDIUM 48

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03284 Published 2018-07-31 No fix listed CWE-306