CVE-2018-10605
HIGHMartem TELEM GW6/GWM <2.0.87-4018403-k4 - Privilege Escalation
Title source: llmDescription
Martem TELEM GW6/GWM versions prior to 2.0.87-4018403-k4 may allow unprivileged users to modify/upload a new system configuration or take the full control over the RTU using default credentials to connect to the RTU.
References (2)
Core 2
Core References
Mitigation, Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-18-142-01
Mitigation, Vendor Advisory x_refsource_confirm
https://martem.eu/csa/Martem_CSA_Telem_1805183.pdf
Scores
CVSS v3
8.8
EPSS
0.0148
EPSS Percentile
70.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-276
CWE-1188
Status
published
Products (2)
martem/telem-gw6_firmware
< 2.0.87-4018403-k4
martem/telem-gwm_firmware
< 2.0.87-4018403-k4
Published
Oct 01, 2018
Tracked Since
Feb 18, 2026