CVE-2010-4731
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2010-4731
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Absolute path traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a full pathname in the file parameter, a different vulnerability than CVE-2009-4463.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WebSCADA多个产品cgi-bin/read.cgi绝对路径遍历漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
基于IntelliCom NetBiter NB100和NB200平台的WebSCADA WS100和WS200，Easy Connect EC150，Modbus RTU - TCP Gateway MB100，以及Serial Ethernet Server SS100中的cgi-bin/read.cgi中存在绝对路径遍历漏洞。远程认证管理员可以借助file参数中的完整路径名读取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2010-4731
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2010-4731
Please Login to view more intelligence information
- http://www.us-cert.gov/control_systems/pdf/ICSA-10-316-01A.pdfx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2010-4731
Same Patch Batch · n/a · 2011-02-14 · 18 CVEs total
| CVE-2011-1029 | IBM Rational Team Concert跨站脚本攻击漏洞 | |
| CVE-2011-0702 | feh util.c feh_unique_filename函数任意文件覆盖漏洞 | |
| CVE-2011-0698 | Django目录遍历漏洞 | |
| CVE-2011-0697 | Django跨站脚本攻击漏洞 | |
| CVE-2011-0696 | Django HTTP请求跨站请求伪造漏洞 | |
| CVE-2011-0447 | Ruby on Rails HTTP请求跨站请求伪造漏洞 | |
| CVE-2011-0446 | Ruby on Rails mail_to helper多个跨站脚本攻击漏洞 | |
| CVE-2011-1031 | feh utils.c feh_unique_filename函数任意文件创建漏洞 | |
| CVE-2011-1030 | IBM Lotus Connections Wikis组件跨站脚本攻击漏洞 | |
| CVE-2008-7274 | IBM WebSphere Application Server JAAS Login功能输入验证漏洞 | |
| CVE-2011-0987 | phpMyAdmin libraries/bookmark.lib.php PMA_Bookmark_get函数输入验证漏洞 | |
| CVE-2011-0986 | phpMyAdmin输入验证漏洞 | |
| CVE-2011-1033 | IBM Informix Dynamic Server oninit栈缓冲区溢出漏洞 | |
| CVE-2011-1032 | IBM Lotus Connections内部登录模块权限许可和访问控制漏洞 | |
| CVE-2010-4733 | WebSCADA多个产品弱口令漏洞 | |
| CVE-2010-4732 | WebSCADA多个产品cgi-bin/read.cgi远程代码执行漏洞 | |
| CVE-2010-4730 | WebSCADA多个产品cgi-bin/read.cgi目录遍历漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8251
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8250
Open5GS SMF n4-build.c smf_n4_build_qos_flow_to_modify_list - CVE-2026-8249
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8248
Open5GS SMF npcf-handler.c update_authorized_pcc_rule_and_qo - CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial
V. Comments for CVE-2010-4731
No comments yet