EUVD-2016-10164

Malware in sbrugna...

EUVD-2016-10166

Malware in sbrugna...

CVE-2016-9354

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

CVE-2016-9356

An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue...

CVE-2016-9354

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

CVE-2016-9356

An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue...

Path traversal

An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue...

Design/Logic Flaw

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

CVE-2016-9354

An issue was discovered in Moxa DACenter Versions 1.4 and older. A specially crafted project file may cause the program to crash because of Uncontrolled Resource Consumption...

CVE-2016-9356

CVE-2016-9356 affects Moxa DACenter versions 1.4 and older. The vulnerability is an unquoted search path (CWE-428) that could enable local privilege escalation, with CVSSv3.0 base score 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) and CVSSv2 base score 4.6 (AV:L/AC:L/Au:N/C:P/I:P/A:P). Connected sou...

CVE-2016-9354

CVE-2016-9354 affects Moxa DACenter versions 1.4 and older. The issue is Uncontrolled Resource Consumption caused by a specially crafted project file, leading to a crash (resource exhaustion). The vulnerability also involves an Unquoted Search Path/Element (CWE-428) that could contribute to insta...

CVE-2016-9356

An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue...

Moxa DACenter Local Elevation of Privilege Vulnerability

Moxa DACenter is an OPC interface from Moxa that interacts with the Moxa Active OPC server for real-time data collection. A local privilege vulnerability exists in Moxa DACenter version 1.4 and earlier. An attacker could exploit this vulnerability to gain elevated privileges...

Moxa DACenter Denial of Service Vulnerability

Moxa DACenter is an OPC interface from Moxa that interacts with the Moxa Active OPC server for real-time data collection. A denial of service vulnerability exists in Moxa DACenter 1.4 and prior versions. A local attacker could exploit this vulnerability to gain elevated privileges or cause a deni...

Moxa DACenter Vulnerabilities

OVERVIEW Independent researcher Zhou Yu has identified denial-of-service and unquoted service path privilege escalation vulnerabilities in Moxa’s DACenter application. Moxa has produced a patch to mitigate these vulnerabilities. Zhou Yu has tested the patch to validate that it resolves the...