EUVD-2018-2767

Malware in sbrugna...

EUVD-2018-2768

Malware in sbrugna...

EUVD-2018-2772

Malware in sbrugna...

EUVD-2018-2770

Malware in sbrugna...

EUVD-2018-2771

Malware in sbrugna...

EUVD-2018-2774

Malware in sbrugna...

EUVD-2018-2763

Malware in sbrugna...

EUVD-2018-2773

Malware in sbrugna...

EUVD-2018-2766

Malware in sbrugna...

EUVD-2018-2765

Malware in sbrugna...

EUVD-2018-2769

Malware in sbrugna...

EUVD-2018-2764

Malware in sbrugna...

EUVD-2018-2762

Malware in sbrugna...

EUVD-2018-2761

Malware in sbrugna...

Moxa AWK-3121 Sensitive Cookie Without Httponly Flag (CVE-2018-10692)

An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie Password508 does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily. This plugin only works with Tenable.ot. Please visit...

Moxa AWK-3121 Cleartext Transmission of Sensitive Information (CVE-2018-10698)

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET...

Moxa AWK-3121 Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2018-10693)

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter srvName is...

Moxa AWK-3121 Cleartext Transmission of Sensitive Information (CVE-2018-10690)

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such...

Moxa AWK-3121 Improper Neutralization of Special Elements Used in a Command (CVE-2018-10702)

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter iwfilename is susceptible to...

Moxa AWK-3121 Improper Neutralization of Input During Web Page Generation (CVE-2018-10700)

An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter iwboarddeviceName is susceptible to this...