critical10.0
CVE-2008-5848
The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (…
Impact
The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Advantech | Adam-6015 | All versions |
| Advantech | Adam-6017 | All versions |
| Advantech | Adam-6018 | All versions |
| Advantech | Adam-6022 | All versions |
| Advantech | Adam-6024 | All versions |
| Advantech | Adam-6050 | All versions |
| Advantech | Adam-6050w | All versions |
| Advantech | Adam-6051 | All versions |
| Advantech | Adam-6051w | All versions |
| Advantech | Adam-6052 | All versions |
| Advantech | Adam-6060 | All versions |
| Advantech | Adam-6060w | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf
- http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW
- http://www.ruxcon.org.au/presentations.shtml#13
- http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf
- http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW
- http://www.ruxcon.org.au/presentations.shtml#13