Authentication flaw

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...

Hardcoded credentials

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session...

CVE-2015-6481

CVE-2015-6481 affects Moxa OnCell Central Manager Software prior to version 2.2. The vulnerability arises from a hard-coded root credential in the RequestController.login function, enabling remote attackers to obtain administrative access and potentially execute code on affected systems. NVD and ...

CVE-2015-6480

The CVE-2015-6480 entry concerns Moxa OnCell Central Manager (pre-2.2). The vulnerable component is the MessageBrokerServlet, which does not require authentication, enabling remote attackers to gain administrative access by issuing commands such as addUserAndGroup. This authentication bypass is t...

CVE-2015-6481

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session...

CVE-2015-6480

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...

Moxa OnCell Central Manager Software任意代码执行漏洞

No description provided by source...

Moxa OnCell Central Manager Software身份验证绕过漏洞

No description provided by source...

Moxa OnCell Central Manager Software Arbitrary Code Execution Vulnerability

Moxa OnCell Central Manager Software is a suite of private IP management software from MOXA. The software supports the configuration, management and monitoring of remote devices over a private network. A security vulnerability exists in Moxa OnCell Central Manager Software prior to version 2.2,...

Moxa OnCell Central Manager Software Authentication Bypass Vulnerability

Moxa OnCell Central Manager Software is a suite of private IP management software from MOXA. The software supports the configuration, management and monitoring of remote devices over a private network. A security vulnerability exists in Moxa OnCell Central Manager Software prior to version 2.2. A...

Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

Moxa OnCell Central Manager provides Web access to private IP network devices. A security vulnerability exists in the implementation of Moxa OnCell Central Manager's MessageBrokerServlet that fails to authenticate the user's identity before accepting commands, which can be exploited by an attacke...

Moxa OnCell Central Manager Server RequestController Remote Code Execution Vulnerability

Moxa OnCell Central Manager provides Web access to private IP network devices. A security vulnerability exists in the RequestController class of Moxa OnCell Central Manager in the login function that contains hard-coded credentials, which can be exploited by an attacker to compromise the affected...

(0Day) Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MessageBrokerServlet servlet, which does not ensure a user is...

(0Day) Moxa OnCell Central Manager Server RequestController Static Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RequestController class. The specific flaw exists within the...

Moxa OnCell Central Manager Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning hardcoded credentials and authentication bypass vulnerabilities in Moxa’s OnCell Central Manager Software. These vulnerabilities were reported to ZDI by security researcher Andrea Micalizzi. Moxa has released a...

CVE-2012-3039

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere...

Design/Logic Flaw

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere...

CVE-2012-3039

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere...

CVE-2012-3039

The CVE affects Moxa OnCell Gateway models G3111, G3151, G3211, and G3251 with firmware prior to 1.4. The root cause is insufficient entropy when generating SSH/SSL keys, enabling an attacker to determine private keys and gain unauthorized access remotely. Public sources (NVD/Red Hat/ICS-CERT con...

MOXA Weak Entropy in DSA Keys Vulnerability

Overview Researcher Nadia Heninger of the University of California, San Diego, and researchers Zakir Durumeric, Eric Wustrow, and J. Alex Halderman of the University of Michigan identified an insufficient entropy vulnerability in MOXA OnCell Gateways. MOA produced and released a firmware upgrade ...