CVE-2018-10603

CVE-2018-10603

Vendor Martem

Product TELEM GW6

Weakness CWE-306 · Missing auth

Published July 31, 2018

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.

Key dates

02Disclosure timeline

July 31, 2018 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2018-10603 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

Identifiers

CVE CVE-2018-10603

CWE CWE-306

Affected versions

Vendor Martem

Product TELEM GW6

Affected 2018.04.18-linux_4-01-601cb47 and prior

Vendor Martem

Product TELEM GWM

Affected 2018.04.18-linux_4-01-601cb47 and prior

01Description

02Disclosure timeline

03References

04Related CVE