CVEvulnerability
CVE-2008-5848
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-255
Description
The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity.
Affected configurations
• advantech adam-6015
• advantech adam-6017
• advantech adam-6018
• advantech adam-6022
• advantech adam-6024
• advantech adam-6050
• advantech adam-6050w
• advantech adam-6051
• advantech adam-6051w
• advantech adam-6052
• advantech adam-6060
• advantech adam-6060w
• advantech adam-6066
• advantech adam-6501
Related
Weakness · not in database (1)
References
- http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf URL Repurposed
- http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW support.advantech.com.tw
- http://www.ruxcon.org.au/presentations.shtml#13 URL Repurposed
- http://ruxcon.org.au/files/2008/SIFT-Ruxcon2008-SCADA-Hacking-Modbus-Enabled-Devices.pdf URL Repurposed
- http://support.advantech.com.tw/support/DownloadSRDetail.aspx?SR_ID=1-95WMW support.advantech.com.tw
- http://www.ruxcon.org.au/presentations.shtml#13 URL Repurposed