CVE-2016-4500

The CVE-2016-4500 entry concerns Moxa UC-7408 LX-Plus devices where remote authenticated users can write to the firmware and render a device unusable by leveraging root access. Technical details indicate missing authentication for critical function (CWE-306) enabling a firmware overwrite that is ...

Moxa UC 7408-LX-Plus Firmware Overwrite Vulnerability

OVERVIEW NCCIC/ICS-CERT has received information from a third party that identified a firmware overwrite vulnerability in Moxa’s UC 7408-LX-Plus device. Moxa has produced instructions to reduce exposure to this vulnerability. The Moxa UC 7408-LX-Plus device has been discontinued. This vulnerabili...