CVE-2015-6480: Improper Authentication

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...

PT-2015-3219

Name of the Vulnerable Software and Affected Versions Moxa OnCell Central Manager versions prior to 2.2 Description The issue is related to the MessageBrokerServlet servlet, which does not require authentication. This allows remote attackers to obtain administrative access via a command. For...