3252 matches found
CVE-2016-2283
CVE-2016-2283 affects Moxa ioLogik E2200 series and ioAdmin Configuration Utility prior to 3.12/3.18, due to insufficient encryption that could let remote attackers obtain cleartext via unspecified vectors. Exploitation is described as remote with publicly available exploits; mitigations include ...
CVE-2016-2283
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...
Moxa UC 7408-LX-Plus Firmware Overwrite Vulnerability
OVERVIEW NCCIC/ICS-CERT has received information from a third party that identified a firmware overwrite vulnerability in Moxa’s UC 7408-LX-Plus device. Moxa has produced instructions to reduce exposure to this vulnerability. The Moxa UC 7408-LX-Plus device has been discontinued. This vulnerabili...
CVE-2016-2283: Undefined Security Weakness
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...
CVE-2016-2282: Undefined Security Weakness
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors...
PT-2016-5086
Name of the Vulnerable Software and Affected Versions Moxa ioLogik E2200 versions prior to 3.12 Moxa ioAdmin Configuration Utility versions prior to 3.18 Description The issue is related to the improper encryption of credentials, making it easier for remote attackers to obtain the associated...
PT-2016-5087
Name of the Vulnerable Software and Affected Versions Moxa ioLogik E2200 versions prior to 3.12 Moxa ioAdmin Configuration Utility versions prior to 3.18 Description The issue concerns the improper encryption of data, making it easier for remote attackers to obtain the associated cleartext via...
Moxa MiiNePort Vulnerabilities
OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-145-01 Moxa MiiNePort Vulnerabilities that was published May 24, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Karn Ganeshen has identified weak credential management, sensitive information not...
moxa AWK-5232-RCC Series 弱口令
No description provided by source...
moxa IA240/241 Embedded computer 弱口令
No description provided by source...
moxa OnCell Central Manager 弱口令
No description provided by source...
moxa EDS-508A/505A Series 弱口令
No description provided by source...
moxa Cellular Micro RTU Controller (ioLogik W53xx, ioLogik) 弱口令
No description provided by source...
Moxa OnCell G3100 弱口令
No description provided by source...
moxa VPort 461 Industrial Video Encoder 弱口令
No description provided by source...
moxa Railway Remote I/O (ioLogik E12xx , ioLogik E15xx ) 弱口令
No description provided by source...
CVE-2015-6481
The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session...
CVE-2015-6480
The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...
Hardcoded credentials
The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session...
Authentication flaw
The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...