PowerHawk 6320 Smart Meter Information Leakage Vulnerability

Released on: 2013-03-26
Updated on: 2013-03-28

Affected Systems:
Triacta PowerHawk 6000 Series Meters
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58709
 
PowerHawk 6320 Smart Meter is used to measure and monitor high-density applications.
 
PowerHawk 6320 Smart Meter 1.12 and other versions do not properly restrict access to the Web UI and may be exploited to leak some configuration data.
 
<* Source: Darius Freamon

Link: http://secunia.com/advisories/52720/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Triacta
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.triacta.com/Products/PowerHawk-Energy-Meters-6000-Series.html