Skip to content
OpenAdvisories
Critical ICSA-18-142-01 4 CVEs

Martem TELEM-GW6/GWM (Update B)

Published May 22, 2018 · Updated Aug 30, 2018 · Revision 3

Vendor: Martem Product: GW6 Product: GWM

Summary

Successful exploitation of these vulnerabilities could allow execution of unauthorized industrial process control commands, full control over RTU, denial of service, or client-side code execution.

Vulnerabilities 4

  • Unscored —
    CVE-2018-10603

    Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of…

    Martem TELEM GWM TELEM GW6
  • Unscored —
    CVE-2018-10605

    Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system con…

    Martem TELEM-GW6/GWM
  • Unscored —
    CVE-2018-10607

    Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow the creation of new connec…

    Martem TELEM GWM TELEM GW6
  • Unscored —
    CVE-2018-10609

    Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior allow improper sanitization of d…

    Martem TELEM-GW6/GWM

Revision history

  1. #3

    ICSA-18-142-01 Martem TELEM-GW6/GWM (Update B)

  2. #2

    ICSA-18-142-01 Martem TELEM-GW6/GWM (Update A)

  3. #1

    ICSA-18-142-01 Martem TELEM-GW6/GWM

References