CVE-2016-2286

The CVE-2016-2286 issue affects Moxa MiiNePort devices (E1_E1_7080/E1_4641 with firmware 1.1.10 Build 09120714; E2_1242/E2_4561 with firmware 1.1 Build 10080614; E3 with firmware 1.0 Build 11071409). The root cause is weak credential management: by default no password is set, enabling blank defau...

CVE-2016-2285

The CVE-2016-2285 CSRF vulnerability affects Moxa MiiNePort serial device server modules (E1_E1_7080/4641 on firmware 1.1.10 Build 09120714; E2_1242/4561 on 1.1 Build 10080614; E3 on 1.0 Build 11071409). Root cause: the web application does not sufficiently verify that a user’s request is intenti...

CVE-2016-2295

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

Moxa MiiNePort Devices Leak Data, Open to Unauthorized Access

Embedded device servers made by Moxa remain vulnerable to a trio of vulnerabilities disclosed today in an advisory published by the Industrial Control Systems Cyber Emergency Response Team ICS-CERT and a blog post by researcher Karn Ganeshen. Moxa, which is based in Taiwan, will publish a beta...

Moxa MiiNePort Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-145-01 Moxa MiiNePort Vulnerabilities that was published May 24, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Karn Ganeshen has identified weak credential management, sensitive information not...

Moxa MiiNePort Privilege Gain Vulnerability

Moxa MiiNePort is an embedded device networking module designed for manufacturers to connect serial devices to a network connection. Moxa MiiNePort fails to enforce a password change, allowing remote attackers to exploit this vulnerability to gain administrative privileges using HTTP and Telnet...

Moxa MiiNePort Cross-Site Request Forgery Vulnerability

Moxa MiiNePort is an embedded device networking module designed for manufacturers to connect serial devices to a network connection. A cross-site request forgery vulnerability exists in the Moxa MiiNePort, which allows remote attackers to construct malicious URIs, trick users into parsing them, a...

Moxa MiiNePort Information Disclosure Vulnerability

Moxa MiiNePort is an embedded device networking module designed for manufacturers to connect serial devices to a network connection. Moxa MiiNePort stores information in clear text and does not provide a protection mechanism, allowing an attacker to view sensitive or configuration information...

Moxa MiiNePort Vulnerabilities

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-145-01 Moxa MiiNePort Vulnerabilities that was published May 24, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Karn Ganeshen has identified weak credential management, sensitive information not...