moxa Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/moxa/ Sun, 26 Feb 2023 06:46:59 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png moxa Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/moxa/ 32 32 CVE-2018-16282 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-16282/ Sun, 26 Feb 2023 06:46:59 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-16282/ A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/net_WebCADELETEGetValue URI.

The post CVE-2018-16282 appeared first on CVE Vulnerability.

]]> A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/net_WebCADELETEGetValue URI.

The post CVE-2018-16282 appeared first on CVE Vulnerability.

]]> CVE-2020-7007 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7007/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7007/ In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of service.

The post CVE-2020-7007 appeared first on CVE Vulnerability.

]]> In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of service.

The post CVE-2020-7007 appeared first on CVE Vulnerability.

]]> CVE-2020-7003 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7003/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7003/ In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.

The post CVE-2020-7003 appeared first on CVE Vulnerability.

]]> In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is transmitted over some web applications in clear text.

The post CVE-2020-7003 appeared first on CVE Vulnerability.

]]> CVE-2020-7001 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-7001/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-7001/ In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed.

The post CVE-2020-7001 appeared first on CVE Vulnerability.

]]> In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed.

The post CVE-2020-7001 appeared first on CVE Vulnerability.

]]> CVE-2020-6997 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6997/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6997/ In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext.

The post CVE-2020-6997 appeared first on CVE Vulnerability.

]]> In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext.

The post CVE-2020-6997 appeared first on CVE Vulnerability.

]]> CVE-2020-6991 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6991/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6991/ In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force.

The post CVE-2020-6991 appeared first on CVE Vulnerability.

]]> In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force.

The post CVE-2020-6991 appeared first on CVE Vulnerability.

]]> CVE-2020-6981 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6981/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6981/ In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication.

The post CVE-2020-6981 appeared first on CVE Vulnerability.

]]> In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication.

The post CVE-2020-6981 appeared first on CVE Vulnerability.

]]> CVE-2020-6979 https://cvevulnerability.com/cve_vulnerabilities/cve-2020-6979/ Sun, 26 Feb 2023 06:42:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2020-6979/ In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered.

The post CVE-2020-6979 appeared first on CVE Vulnerability.

]]> In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered.

The post CVE-2020-6979 appeared first on CVE Vulnerability.

]]> CVE-2019-9102 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9102/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9102/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.

The post CVE-2019-9102 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. A predictable mechanism of generating tokens allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism.

The post CVE-2019-9102 appeared first on CVE Vulnerability.

]]> CVE-2019-9095 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-9095/ Sun, 26 Feb 2023 06:34:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-9095/ An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.

The post CVE-2019-9095 appeared first on CVE Vulnerability.

]]> An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3, and MB3180 devices before 2.1. An attacker may be able to intercept weakly encrypted passwords and gain administrative access.

The post CVE-2019-9095 appeared first on CVE Vulnerability.

]]>