CVE-2017-7915

2017-05-2916:00:00

CWE-307

icscert

www.cve.org

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.9%

JSON

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication.

CNA Affected

[
  {
    "product": "Moxa OnCell",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Moxa OnCell"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-17-143-01