CVE-2009-4463

CVE-2009-4463 describes a critical vulnerability in Intellicom NetBiter WebSCADA devices, specifically affecting the netbiter_webscada_firmware, WS100, and WS200 models. The vulnerability stems from the use of default passwords for the HICP network configuration service, allowing remote attackers to modify network settings and potentially cause a denial of service. This vulnerability carries a CVSS score of 10.0, indicating maximum severity due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While the issue is present only when administrators fail to change default passwords, its potential impact is severe. Currently, there is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community attention, with no social media discussions or media coverage reported.