CVE-2015-6481

2015-12-2111:00:00

icscert

www.cve.org

AI Score

8.1

Confidence

High

EPSS

0.229

Percentile

96.6%

JSON

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session.

References

zerodayinitiative.com/advisories/ZDI-15-453/

ics-cert.us-cert.gov/advisories/ICSA-15-328-01