CVE-2010-4730 Path traversal in n/a
Remote authenticated administrators can read arbitrary files via directory traversal in WebSCADA and related industrial network devices.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-4730?
CVE-2010-4730 is a medium-severity path traversal vulnerability in n/a, published on 14 Feb 2011. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a .. (dot dot) in the page parameter, a different vulnerability than CVE-2009-4463.
Weakness: CWE-22
Which versions are affected by CVE-2010-4730?
It affects 7 products.
Products include Intellicom Netbiter Easyconnect Ec150, Intellicom Netbiter Modbus Rtu-Tcp Gateway Mb100, Intellicom Netbiter Nb100, Intellicom Netbiter Nb200, Intellicom Netbiter Serial Ethernet Server Ss100, Intellicom Netbiter Webscada Ws100 and 1 more.
How do I fix CVE-2010-4730?
No fix has been published for CVE-2010-4730 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2010-4730 being exploited?
There is no known exploitation of CVE-2010-4730 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-66g7-w76p-vj2q.