CVE-2016-0878

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service cold start by sending two crafted ping requests...

CVE-2016-0875

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL...

CVE-2016-2285

Cross-site request forgery CSRF vulnerability on Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and...

CVE-2016-2295

The CVE-2016-2295 issue affects Moxa MiiNePort devices (E1_E1_7080, E1_4641, E2_1242, E2_4561, and E3) with listed firmware builds, where cleartext configuration data is stored. Reading the configuration file remotely can disclose sensitive information. According to ICS-CERT, this includes potent...

CVE-2016-0879

Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL...

CVE-2016-0879

Affected device: Moxa Secure Router EDR-G903 (versions ≤3.4.11). Vulnerability: Unauthenticated access allows an attacker to download server-side configuration and log files by requesting specific URLs after performing the import function (CWE-284 / CVSSv3.1 base 7.5, remote, network). Impact: Di...

CVE-2016-0875

CVE-2016-0875 affects Moxa EDR-G903 Secure Router devices (prior to firmware version 3.4.12). The vulnerability stems from improper access control that allows remote attackers to read configuration and log files by requesting a crafted URL. Public references describe affected products as EDR-G903...

CVE-2016-0876

CVE-2016-0876 affects Moxa EDR-G903 Secure Router (versions prior to 3.4.12). The vulnerability stems from plaintext storage of passwords in configuration files, enabling remote attackers to read cleartext passwords. Impact is remote exposure of credentials; CVSS v3 base score 7.5 (HIGH). Mitigat...

CVE-2016-0877

CVE-2016-0877 affects Moxa EDR-G903 Secure Router devices (pre-3.4.12). The vulnerability is a memory leak in the information exposure path caused by the ping function, allowing remote attackers to cause denial of service via memory consumption. The issue is tied to a vulnerability in the device’...

CVE-2016-0878

Summary (CVE-2016-0878) Affected: Moxa Secure Router EDR-G903 (versions before 3.4.12). Vulnerability: Remote attackers can cause a denial of service (cold start) by sending two crafted ping requests. Exploitation is remote; no user interaction required. Root cause: Denial of Service due to impro...

CVE-2016-2286

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

CVE-2016-2285

The CVE-2016-2285 CSRF vulnerability affects Moxa MiiNePort serial device server modules (E1_E1_7080/4641 on firmware 1.1.10 Build 09120714; E2_1242/4561 on 1.1 Build 10080614; E3 on 1.0 Build 11071409). Root cause: the web application does not sufficiently verify that a user’s request is intenti...

PT-2016-5088

Name of the Vulnerable Software and Affected Versions Moxa MiiNePort E1 4641 version 1.1.10 Build 09120714 Moxa MiiNePort E1 7080 version 1.1.10 Build 09120714 Moxa MiiNePort E2 1242 version 1.1 Build 10080614 Moxa MiiNePort E2 4561 version 1.1 Build 10080614 Moxa MiiNePort E3 version 1.0 Build...

CVE-2016-0876: Cleartext Storage of Sensitive Information

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

CVE-2016-0875: Insertion of Sensitive Information into Log File

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL...

PT-2016-4436

Name of the Vulnerable Software and Affected Versions Moxa Secure Router EDR-G903 versions prior to 3.4.12 Description The issue allows remote attackers to discover cleartext passwords by reading a configuration file. Recommendations For versions prior to 3.4.12, update to version 3.4.12 or later...

CVE-2016-0878: Undefined Security Weakness

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service cold start by sending two crafted ping requests...

CVE-2016-2286: Improper Authentication

Moxa MiiNePortE14641 devices with firmware 1.1.10 Build 09120714, MiiNePortE17080 devices with firmware 1.1.10 Build 09120714, MiiNePortE21242 devices with firmware 1.1 Build 10080614, MiiNePortE24561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build...

PT-2016-5098

Name of the Vulnerable Software and Affected Versions Moxa MiiNePort E1 4641 version 1.1.10 Build 09120714 Moxa MiiNePort E1 7080 version 1.1.10 Build 09120714 Moxa MiiNePort E2 1242 version 1.1 Build 10080614 Moxa MiiNePort E2 4561 version 1.1 Build 10080614 Moxa MiiNePort E3 version 1.0 Build...

CVE-2016-0877: Missing Release of Resource after Effective Lifetime

Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...