CVE-2018-18391

User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18393

Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18391

User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18392

Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18393

Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18395

Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18396

Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1...

CVE-2018-18395

CVE-2018-18395 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions v2.1. A vulnerability described as Hidden Token Access exists, with CNVD reporting that a remote attacker could gain root privileges and execute arbitrary code via a hidden API token. The CVE’s CVSS scores...

CVE-2018-18396

The CVE-2018-18396 entry concerns Moxa ThingsPro IIoT Gateway and Device Management Software Solutions, version 2.1. Multiple connected sources (CNVD-2018-21513, NVD, and related records) authorize a Remote Code Execution vulnerability in this product. The root cause is an ability for a remote at...

CVE-2018-18394

CVE-2018-18394 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions v2.1, where the system stores sensitive information in plaintext (notably tokens). The provided sources (NVD, CNVD, PRION) describe the root cause as plaintext storage, enabling an attacker to recover acce...

CVE-2018-18390

CVE-2018-18390 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Connected sources describe a user enumeration vulnerability over the network, with CNVD noting a remote attacker could use brute-force attempts to obtain a valid user password. The CVSS metric...

CVE-2018-18391

CVE-2018-18391 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. The connected documents describe a user privilege escalation vulnerability in ThingsPro, but do not specify the underlying root cause, affected components, or concrete exploitation details. Pu...

CVE-2018-18393

CVE-2018-18393 affects Moxa ThingsPro IIoT Gateway and Device Management Software Solutions v2.1. Sources indicate a password management vulnerability that could allow a remote attacker to change a user’s password, implying potential account compromise. The connected CNVD entry confirms remote pa...

CVE-2018-18392

CVE-2018-18392 describes a privilege escalation due to broken access control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions, version 2.1. Affected component is the ThingsPro product suite; the root cause is improper access control allowing elevation of privileges. Impact ...

PT-2018-14433

Name of the Vulnerable Software and Affected Versions Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1 Description The issue concerns user enumeration in the affected software. Recommendations For version 2.1, update to a version that fixes the user enumeration...

PT-2018-14439

Name of the Vulnerable Software and Affected Versions Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1 Description The issue concerns Remote Code Execution in the specified software, allowing for potential malicious code execution. Recommendations For Moxa ThingsPr...

PT-2018-14437

Name of the Vulnerable Software and Affected Versions Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1 Description The issue concerns sensitive information being stored in clear text. Recommendations For version 2.1, update to a version that stores sensitive...

PT-2018-14436

Name of the Vulnerable Software and Affected Versions Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1 Description The issue is related to password management in the affected software. Recommendations For version 2.1, update to a newer version that contains a fix f...

PT-2018-14435

Name of the Vulnerable Software and Affected Versions Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1 Description The issue is related to Privilege Escalation via Broken Access Control. Recommendations For Moxa ThingsPro IIoT Gateway and Device Management Software...

PT-2018-14438

Name of the Vulnerable Software and Affected Versions Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1 Description The issue concerns Hidden Token Access in the affected software. Recommendations For Moxa ThingsPro IIoT Gateway and Device Management Software...