CVE:CVE-2010-4730
CNNVD:CNNVD-201102-225
基于IntelliCom NetBiter NB100和NB200平台的WebSCADA WS100和WS200，Easy Connect EC150，Modbus RTU - TCP Gateway MB100，以及Serial Ethernet Server SS100中的cgi-bin/read.cgi中存在目录遍历漏洞。远程认证管理员可以借助page参数中的".."操作符读取任意文件。
solution:Upgrade intellicom netbiter_easyconnect_ec150 to a higher version than *; Upgrade intellicom netbiter_modbus_rtu-tcp_gateway_mb100 to a higher version than *; Upgrade intellicom netbiter_serial_ethernet_server_ss100 to a higher version than *; Upgrade intellicom netbiter_webscada_ws100 to a higher version than *; Upgrade intellicom netbiter_webscada_ws200 to a higher version than *; Upgrade intellicom netbiter_nb100 to a higher version than *; Upgrade intellicom netbiter_nb200 to a higher version than *