CVE-2008-5848
Summary
| CVE | CVE-2008-5848 |
|---|---|
| State | PUBLISHED |
| Assigner | mitre |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-01-06 17:30:00 UTC |
| Updated | 2026-04-23 00:35:47 UTC |
| Description | The Advantech ADAM-6000 module has 00000000 as its default password, which makes it easier for remote attackers to obtain access through an HTTP session, and (1) monitor or (2) control the module's Modbus/TCP I/O activity. |
Risk And Classification
Primary CVSS: v2.0 10 from [email protected]
AV:N/AC:L/Au:N/C:C/I:C/A:C
Problem Types: CWE-255 | NVD-CWE-noinfo | n/a
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
LowAuthentication
NoneConfidentiality
CompleteIntegrity
CompleteAvailability
CompleteAV:N/AC:L/Au:N/C:C/I:C/A:C
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Advantech | Adam-6015 | All | All | All | All |
| Hardware | Advantech | Adam-6017 | All | All | All | All |
| Hardware | Advantech | Adam-6018 | All | All | All | All |
| Hardware | Advantech | Adam-6022 | All | All | All | All |
| Hardware | Advantech | Adam-6024 | All | All | All | All |
| Hardware | Advantech | Adam-6050 | All | All | All | All |
| Hardware | Advantech | Adam-6050w | All | All | All | All |
| Hardware | Advantech | Adam-6051 | All | All | All | All |
| Hardware | Advantech | Adam-6051w | All | All | All | All |
| Hardware | Advantech | Adam-6052 | All | All | All | All |
| Hardware | Advantech | Adam-6060 | All | All | All | All |
| Hardware | Advantech | Adam-6060w | All | All | All | All |
| Hardware | Advantech | Adam-6066 | All | All | All | All |
| Hardware | Advantech | Adam-6501 | All | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Support & Download - Advantech | af854a3a-2127-422b-91ae-364da2661108 | support.advantech.com.tw | |
| RUXCON | af854a3a-2127-422b-91ae-364da2661108 | www.ruxcon.org.au | URL Repurposed |
| 404 Not Found | af854a3a-2127-422b-91ae-364da2661108 | ruxcon.org.au | URL Repurposed |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.