Every CVE Search/ Get API key

CVE-2009-4463

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration...

10.0 High

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Exploit likelihood

3.39%Down 11.3 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Record
CVE-2009-4463
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-255
Updated
2026-11-02
CVE List No score

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Record
CVE-2009-4463
Updated
2026-11-02
EUVDEUVD-2009-4430 No score

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Record
EUVD-2009-4430
Updated
2026-11-03
GitHub AdvisoriesGHSA-q6rw-377c-mgh7 No score

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration...

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Record
GHSA-q6rw-377c-mgh7
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2009-4463 is a high vulnerability (CVSS 10.0) in Intellicom Netbiter Webscada Firmware, published December 30, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.39%, the 88th percentile. No source names a fixed version.

References

MoveEnter Open