CVE-2018-10603

Martem / TELEM GW6 PUBLISHED

Description (CNA)

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.

Affected (CNA)

Vendor / product	Versions
Martem / TELEM GW6	affected 2018.04.18-linux_4-01-601cb47 and prior
Martem / TELEM GWM	affected 2018.04.18-linux_4-01-601cb47 and prior

CWE

CWE-306

References

https://ics-cert.us-cert.gov/advisories/ICSA-18-142-01
http://www.securityfocus.com/bid/104286

ADP enrichment

CVE

No English description supplied.

https://ics-cert.us-cert.gov/advisories/ICSA-18-142-01
http://www.securityfocus.com/bid/104286