CVE-2018-11427

2019-07-0314:46:54

mitre

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.3%

JSON

CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator.

References

github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-106.md