description: Martem TELEM GW6 and GWM devices with firmware 2018.04.18-linux_4-01-601cb47 and prior do not perform authentication of IEC-104 control commands, which may allow a rogue node a remote control of the industrial process.
problem types: MISSING AUTHENTICATION FOR CRITICAL FUNCTION CWE-306
affected:
{
product: TELEM GW6
vendor: Martem
versions:
status: affected, version: 2018.04.18-linux_4-01-601cb47 and prior
}
{
product: TELEM GWM
vendor: Martem
versions:
status: affected, version: 2018.04.18-linux_4-01-601cb47 and prior
}
