Authentication flaw

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...

CVE-2015-6481

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session...

CVE-2015-6480

The CVE-2015-6480 entry concerns Moxa OnCell Central Manager (pre-2.2). The vulnerable component is the MessageBrokerServlet, which does not require authentication, enabling remote attackers to gain administrative access by issuing commands such as addUserAndGroup. This authentication bypass is t...

CVE-2015-6481

CVE-2015-6481 affects Moxa OnCell Central Manager Software prior to version 2.2. The vulnerability arises from a hard-coded root credential in the RequestController.login function, enabling remote attackers to obtain administrative access and potentially execute code on affected systems. NVD and ...

CVE-2015-6480

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...

CVE-2015-6481: Undefined Security Weakness

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session...

CVE-2015-6480: Improper Authentication

The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action...

Moxa OnCell Central Manager Software身份验证绕过漏洞

No description provided by source...

Moxa OnCell Central Manager Software任意代码执行漏洞

No description provided by source...

Moxa OnCell Central Manager Software Authentication Bypass Vulnerability

Moxa OnCell Central Manager Software is a suite of private IP management software from MOXA. The software supports the configuration, management and monitoring of remote devices over a private network. A security vulnerability exists in Moxa OnCell Central Manager Software prior to version 2.2. A...

Moxa OnCell Central Manager Software Arbitrary Code Execution Vulnerability

Moxa OnCell Central Manager Software is a suite of private IP management software from MOXA. The software supports the configuration, management and monitoring of remote devices over a private network. A security vulnerability exists in Moxa OnCell Central Manager Software prior to version 2.2,...

Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

Moxa OnCell Central Manager provides Web access to private IP network devices. A security vulnerability exists in the implementation of Moxa OnCell Central Manager's MessageBrokerServlet that fails to authenticate the user's identity before accepting commands, which can be exploited by an attacke...

(0Day) Moxa OnCell Central Manager Server MessageBrokerServlet Authentication Bypass Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MessageBrokerServlet servlet, which does not ensure a user is...

PT-2015-3220

Name of the Vulnerable Software and Affected Versions Moxa OnCell Central Manager versions prior to 2.2 Description The issue is related to a hardcoded root password in the login function of the RequestController class. This allows remote attackers to gain administrative access via a login sessio...

PT-2015-3219

Name of the Vulnerable Software and Affected Versions Moxa OnCell Central Manager versions prior to 2.2 Description The issue is related to the MessageBrokerServlet servlet, which does not require authentication. This allows remote attackers to obtain administrative access via a command. For...

(0Day) Moxa OnCell Central Manager Server RequestController Static Credentials Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa OnCell Central Manager Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RequestController class. The specific flaw exists within the...

Moxa OnCell Central Manager Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning hardcoded credentials and authentication bypass vulnerabilities in Moxa’s OnCell Central Manager Software. These vulnerabilities were reported to ZDI by security researcher Andrea Micalizzi. Moxa has released a...

Design/Logic Flaw

The web service framework in Cisco WAAS Software 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1 in a Central Manager CM configuration allows remote attackers to execute arbitrary code via a crafted POST request, aka Bug ID CSCuh26626...

Cisco WAAS Central Manager Remote Code Execution Vulnerability

Cisco Wide Area Application Services WAAS when configured as Central Manager CM, contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the affected system. Cisco has released software updates that address this vulnerability. Workarounds that...

PT-2013-4398

Name of the Vulnerable Software and Affected Versions Cisco WAAS Software versions 4.x through 5.0.3e Cisco WAAS Software versions 5.1.x through 5.1.1c Cisco WAAS Software versions 5.2.x through 5.2.1 Description The web service framework in Cisco WAAS Software allows remote attackers to execute...