CVE-2018-5455

2018-03-0517:00:00

CWE-565

icscert

www.cve.org

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.

CNA Affected

[
  {
    "product": "Moxa OnCell G3100-HSPA Series",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Moxa OnCell G3100-HSPA Series"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-18-060-02