Lucene search

MoxaCVE-2023-6093

HistoryDec 31, 2023 - 10:15 a.m.

CVE-2023-6093

2023-12-3110:15:08

CWE-1021

Moxa

web.nvd.nist.gov

cve-2023-6093

oncell g3150a-lte

firmware vulnerability

interface restriction

user confusion

application interaction

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the attacker to trick the user into interacting with the application.

Affected configurations

Nvd

Node

moxaoncell_g3150a-lte_firmwareRange≤1.3

AND

moxaoncell_g3150a-lteMatch-

VendorProductVersionCPE
moxaoncell_g3150a-lte_firmware*cpe:2.3:o:moxa:oncell_g3150a-lte_firmware:*:*:*:*:*:*:*:*
moxaoncell_g3150a-lte-cpe:2.3:h:moxa:oncell_g3150a-lte:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moxa	oncell_g3150a-lte_firmware	*	cpe:2.3:o:moxa:oncell_g3150a-lte_firmware::::::::
moxa	oncell_g3150a-lte	-	cpe:2.3:h:moxa:oncell_g3150a-lte:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "OnCell G3150A-LTE Series",
    "vendor": "Moxa",
    "versions": [
      {
        "lessThanOrEqual": "1.3",
        "status": "affected",
        "version": "1.0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.moxa.com/en/support/product-support/security-advisory/oncell-g3150a-lte-series-multiple-web-application-vulnerabilities-and-security-enhancement

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

Related for CVE-2023-6093