CVE-2016-8362

CVE-2016-8362 affects Moxa OnCell OnCellG3470A-LTE and a wide range of AWK/WAC/TAP models. The issue is described as Improper Authentication that allows any user to download log files by accessing a specific URL, with an attack scenario that does not require authentication. Impact in the public a...

CVE-2016-8363

CVE-2016-8363 affects Moxa OnCell gateways (OnCellG3470A-LTE, AWK-1131A/3131A/4131A, AWK-3191, AWK-5232/6232, AWK-1121/1127, WAC-1001 V2, WAC-2004, AWK-3121-M12-RTG, AWK-3131-M12-RCC, AWK-5232-M12-RCC, TAP-6226, AWK-3121/4121, AWK-3131/4131, AWK-5222/6222). The root cause is an improper auth/perm...

PT-2017-9640

Name of the Vulnerable Software and Affected Versions Moxa OnCell OnCellG3470A-LTE versions affected versions not specified Moxa AWK-1131A/3131A/4131A Series versions affected versions not specified Moxa AWK-3191 Series versions affected versions not specified Moxa AWK-5232/6232 Series versions...

CVE-2016-8363: Undefined Security Weakness

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

CVE-2016-8362: Improper Authentication

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series...

Moxa OnCell Series Product Validation Bypass Vulnerability

MOXA OnCell is an industrial grade IP gateway product. The Moxa OnCell Series product authentication bypass vulnerability can be exploited by an attacker to bypass authentication mechanisms and gain unauthorized access...

Moxa OnCell Series Products OS Command Execution Vulnerability

MOXA OnCell is an industrial grade IP gateway product. An OS command execution vulnerability exists in Moxa OnCell Series products, which can be exploited by an attacker to execute arbitrary OS commands...

Cross-Site Scripting Vulnerability in Multiple Moxa Products

Moxa OnCell G3100 and others are IP gateway products from Moxa. A cross-site scripting vulnerability exists in multiple Moxa products, which can be exploited by an attacker to execute arbitrary script code in a user's browser...

Moxa OnCell Vulnerabilities (Update A)

OVERVIEW This updated advisory is a follow-up to the original advisory titled ICSA-16-236-01 Moxa OnCell Vulnerabilities that was published August 23, 2016, on the NCCIC/ICS-CERT web site. Independent researcher Maxim Rupp has identified several vulnerabilities in Moxa’s OnCell products. Moxa has...

CVE-2016-5799

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2016-5812

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file...

CVE-2016-5812

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file...

CVE-2016-5799

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

Design/Logic Flaw

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file...

Authentication flaw

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2016-5799

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack...

CVE-2016-5812

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file...

CVE-2016-5799

CVE-2016-5799 affects Moxa OnCell G3100V2 (firmware before 2.8) and G3111/G3151/G3211/G3251 (firmware before 1.7). The vulnerability is due to improper restriction of excessive authentication attempts, enabling remote attackers to perform brute-force authentication to gain access. Connected advis...

CVE-2016-5812

The CVE-2016-5812 issue affects Moxa OnCell devices: G3100V2 (before 2.8) and G3111/G3151/G3211/G3251 (before 1.7) store passwords in plaintext in configuration files. Root cause is PLAINTEXT STORAGE OF A PASSWORD (CWE-256). Impact per sources: local access could read sensitive credentials; ICS a...

Information Disclosure Vulnerability in Multiple Moxa Products

Moxa OnCell G3100V2 and others are IP gateway products from Moxa. An information disclosure vulnerability exists in a number of Moxa products, which stems from the program's use of plaintext password storage. A local attacker can exploit this vulnerability by reading configuration files to obtain...