CVE-2016-8360

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. A specially crafted URL request sent to the SoftCMS ASP Webserver can cause a double free condition on the server allowing an attacker to modify memory locations and possibly cause a denial of service or the execution of...

CVE-2016-8359

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...

CVE-2016-8372

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...

CVE-2016-8350

CVE-2016-8350 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Moxa ioLogik E1200 and E2200 series devices. The issue lies in the web application failing to verify that requests originate from a valid user, enabling remote attackers to perform unauthorized operations. Affected firmw...

CVE-2016-9346

CVE-2016-9346 affects Moxa MiiNePort E1 (before 1.8), E2 (before 1.4), and E3 (before 1.1). The issue is cleartext storage of configuration data in an unencrypted file, enabling potential information disclosure. NVD notes CVSS v3 base score 5.3 (L: Low impact on confidentiality) with network acce...

CVE-2016-8379

An issue was discovered in Moxa ioLogik E1210, firmware Version V2.4 and prior, ioLogik E1211, firmware Version V2.3 and prior, ioLogik E1212, firmware Version V2.4 and prior, ioLogik E1213, firmware Version V2.5 and prior, ioLogik E1214, firmware Version V2.4 and prior, ioLogik E1240, firmware...

CVE-2016-9363

The CVE-2016-9363 issue affects Moxa NPort serial device servers (examples include NPort 5110, 5130/5150, 5200, 5400, 5600, 5100A/P5150A, 5200A, 5150AI-M12, 5250AI-M12, 5450AI-M12, 5600-8-DT/DTL, IA5450A, 6000, and 6110 families) with a buffer overflow that may allow an unauthenticated attacker t...

CVE-2016-8379

CVE-2016-8379 affects Moxa ioLogik E1200/E2200 remote I/O devices, specifically the “Weak Password Requirements” vulnerability. The issue arises from allowing short passwords, enabling remote abuse of credentials on affected models (E1210/1211/1212/1213/1214/1240/1241/1242/1260/1262 and E2210/E22...

CVE-2016-9367: Uncontrolled Resource Consumption

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

CVE-2016-9354: Undefined Security Weakness

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

CVE-2016-9366: Improper Restriction of Excessive Authentication Attempts

An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPor...

PT-2017-9645

Name of the Vulnerable Software and Affected Versions Moxa ioLogik E1210 versions V2.4 and prior Moxa ioLogik E1211 versions V2.3 and prior Moxa ioLogik E1212 versions V2.4 and prior Moxa ioLogik E1213 versions V2.5 and prior Moxa ioLogik E1214 versions V2.4 and prior Moxa ioLogik E1240 versions...

PT-2017-9640

Name of the Vulnerable Software and Affected Versions Moxa OnCell OnCellG3470A-LTE versions affected versions not specified Moxa AWK-1131A/3131A/4131A Series versions affected versions not specified Moxa AWK-3191 Series versions affected versions not specified Moxa AWK-5232/6232 Series versions...

CVE-2016-8362: Improper Authentication

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

CVE-2016-8363: Undefined Security Weakness

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

PT-2017-10081

Name of the Vulnerable Software and Affected Versions Moxa DACenter versions 1.4 and older Description An issue was discovered that may cause the program to crash due to Uncontrolled Resource Consumption when a specially crafted project file is used. Recommendations For Moxa DACenter versions 1.4...

CVE-2016-9332: Undefined Security Weakness

An issue was discovered in Moxa SoftCMS versions prior to Version 1.6. Moxa SoftCMS Webserver does not properly validate input. An attacker could provide unexpected values and cause the program to crash or excessive consumption of resources could result in a denial-of-service condition...

PT-2017-9626

Name of the Vulnerable Software and Affected Versions Moxa EDR-810 Industrial Secure Router affected versions not specified Description An issue was discovered that allows a malicious user to access configuration and log files by accessing a specific uniform resource locator URL on the web server...

PT-2017-10065

Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions prior to 1.6 Description An issue in Moxa SoftCMS Webserver allows an attacker to provide unexpected input values, potentially causing the program to crash or leading to excessive consumption of resources, which could...

PT-2017-10083

Name of the Vulnerable Software and Affected Versions Moxa DACenter versions 1.4 and older Description An issue was discovered in the application, which may suffer from an unquoted search path issue. Recommendations For Moxa DACenter versions 1.4 and older, at the moment, there is no information...