CVE-2018-11425

CVE-2018-11425 affects Moxa OnCell G3470A-LTE Series web interface. A memory corruption vulnerability exists in version 1.6 Build 18021314 and earlier, distinct from CVE-2018-11424. Affected product is the G3470A-LTE gateway; issue is in the web interface, with memory corruption as the underlying...

CVE-2018-11426

The CVE-2018-11426 entry concerns the Moxa OnCell G3100-HSPA Series web interface (versions 1.4 Build 16062919 and earlier). A weak Cookie parameter allows brute-forcing to bypass authentication and access the web UI with full functionality except password changes. The vulnerability context acros...

CVE-2018-11426

A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change...

CVE-2018-11427

The CVE-2018-11427 vulnerability affects Moxa OnCell G3100-HSPA Series devices running version 1.4 Build 16062919 and earlier. The underlying issue is that the web application does not use CSRF tokens, enabling cross-site request forgery against the device administrator. Documents from NVD, Red H...

CVE-2018-11427

CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator...

PT-2019-4710

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior Description The issue is related to improper access control in the web interface of the Moxa OnCell G3100-HSPA Series, which can be exploited by a remote attacker to execute...

CVE-2018-11422: Cleartext Transmission of Sensitive Information

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary configuration protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. Any commands including devi...

CVE-2018-11425: Improper Restriction of Operations within the Bounds of a Memory Buffer

Memory corruption issue was discovered in Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11424...

PT-2019-4712

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior Description The issue is related to memory corruption in the web interface. There is also a mention of a null pointer dereference vulnerability in the Moxa OnCell G3100-HSPA...

PT-2019-4715

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior Description The issue is related to the absence of CSRF tokens in the web application, which allows for CSRF attacks on the device administrator. This can be exploited by a...

CVE-2018-11427: Cross-Site Request Forgery (CSRF)

CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator...

PT-2019-4713

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior Description A memory corruption issue was discovered, related to a null pointer dereference in the web interface of industrial LTE IP modems. This issue can be exploited by a...

PT-2019-4708

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100-HSPA Series version 1.5 Build 17042015 Description The issue is related to memory corruption in the web interface of the affected device. It is also described as an uncontrolled resource consumption vulnerability in the web...

CVE-2018-11426: Improper Authentication

A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change...

CVE-2018-11421: Cleartext Transmission of Sensitive Information

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to...

PT-2019-4709

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior Description The issue is related to insufficient protection of service data in the web interface of the Moxa OnCell G3100-HSPA Series. This can allow a remote attacker to gain...

CVE-2018-11423: Improper Restriction of Operations within the Bounds of a Memory Buffer

There is Memory corruption in the web interface Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior, different vulnerability than CVE-2018-11420...

CVE-2018-11420: Out-of-bounds Write

There is Memory corruption in the web interface of Moxa OnCell G3100-HSPA Series version 1.5 Build 17042015 and prio,r a different vulnerability than CVE-2018-11423...

CVE-2018-11424: Out-of-bounds Write

There is Memory corruption in the web interface of Moxa OnCell G3470A-LTE Series version 1.6 Build 18021314 and prior, a different vulnerability than CVE-2018-11425...

PT-2019-4711

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior Description The issue is related to memory corruption in the web interface, which can be exploited by a remote attacker to cause a denial of service. This is due to a buffer...