CVE-2009-4463: Intellicom Netbiter Webscada Firmware

High severity, CVSS 10.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Intellicom NetBiter WebSCADA devices use default passwords for the HICP network configuration service, which makes it easier for remote attackers to modify network settings and cause a denial of service. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: this issue was originally reported to be hard-coded passwords, not default passwords.

Affected products

• Intellicom Netbiter Webscada Firmware: version 3.11.0 only; version 3.11.1 only; version 3.11.2 only; version 3.12.4 only; version 3.12.6 only; version 3.13.0 only; …
• Intellicom Netbiter Webscada WS100: any version
• Intellicom Netbiter Webscada WS200: any version

Published 2009-12-30. Last modified 2026-06-16.