CVE-2018-18392

2018-10-1800:00:00

Kaspersky

www.cve.org

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CNA Affected

[
  {
    "product": "ThingsPro IIoT Gateway and Device Management Software Solutions",
    "vendor": "Moxa",
    "versions": [
      {
        "status": "affected",
        "version": "2.1"
      }
    ]
  }
]

References

ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-020-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-broken-access-control/