Code injection

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

CVE-2015-6464

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin...

CVE-2015-6466

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6465

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

CVE-2015-6466

CVE-2015-6466 is an XSS vulnerability in the Diagnosis Ping feature of the administrative web interface on Moxa EDS-405A/EDS-408A switches, exploitable via an unspecified field in firmware prior to 3.6. Affected devices run Moxa’s EDS-405A/EDS-408A series; CVSSv2 base score 4.3 (AV:N/AC:M/Au:N/C:...

CVE-2015-6464

CVE-2015-6464 affects Moxa EDS-405A/EDS-408A switches. The administrative web interface contains an improper privilege management flaw that lets remote authenticated users bypass the read-only protection via a Firefox web developer plugin. Impact: elevation of privileges (read/write where only re...

CVE-2015-6465

CVE-2015-6465 affects Moxa EDS-405A/EDS-408A switches (embedded GoAhead web server). A denial-of-service (device reboot) can be triggered by a crafted URL when the attacker has remote authenticated access. Firmware older than 3.6 is vulnerable; upgrading to firmware 3.6 or later mitigates the iss...

CVE-2015-6464: Undefined Security Weakness

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin...

CVE-2015-6466: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6465: Undefined Security Weakness

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

Moxa Industrial Managed Switch Cross-Site Scripting Vulnerability

Moxa EDS-405A/EDS-408A is a series of Ethernet switches. A cross-site scripting vulnerability exists in the embedded management web interface of the Moxa EDS-405A/EDS-408A, which can be exploited by remote attackers to inject arbitrary JS code...

PT-2015-7255

Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions 1.3 and prior Description The issue is related to a buffer overflow condition that may cause the system to crash or allow remote code execution. The ip argument in the AudioRecord method of RTSPVIDEO.rtspvideoCtrl.1 is...

Moxa SoftCMS RTSPVIDEO.rtspvideoCtrl.1 AudioRecord Method fullfilename Parameter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioRecord...

PT-2015-7254

Name of the Vulnerable Software and Affected Versions Moxa SoftCMS versions 1.3 and prior Description The issue is related to a buffer overflow condition that may cause the system to crash or allow remote code execution. Technical details include the exploitation of various components and methods...

Moxa Industrial Managed Switch denial of service vulnerability(CVE-2 0 1 5-6 4 6 5)-vulnerability warning-the black bar safety net

Affected system: Moxa Industrial Managed Switch EDS-408A Moxa Industrial Managed Switch EDS-405A Description: CVECAN ID: CVE-2 0 1 5-6 4 6 5 Moxa EDS-405A/EDS-408A Ethernet switch Series products. Moxa EDS-405A/EDS-408A embedded GoAhead Web serverthere is a denial of service vulnerability, an...

Moxa Industrial Managed Switch Elevation of Privilege Vulnerability

Moxa EDS-405A/EDS-408A is a series of Ethernet switches. An elevation of privilege vulnerability exists in the management web interface of the Moxa EDS-405A/EDS-408A, which can be exploited by an attacker to bypass the authentication mechanism and elevate privileges...

Moxa SoftCMS VLCPlugin ActiveX Control setUserInfoData strUserName Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of the...

Moxa SoftCMS VLCControl setUserInfoData strIP Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within processing of the...

Moxa SoftCMS RTSPVIDEO.rtspvideoCtrl.1 Open3 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Open3 method of...

Moxa SoftCMS RTSPVIDEO.rtspvideoCtrl.1 AudioRecord Method ip Argument Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioRecord...