Moxa SoftCMS IPCam.IPCam_Video_Render_Plugin.1 IVLCControl setRecordPrefix Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the setRecordPrefix...

Moxa SoftCMS RTSPVIDEO.rtspvideoCtrl.1 AudioRecord Method ip Argument Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AudioRecord...

Moxa SoftCMS RTSPVIDEO.rtspvideoCtrl.1 Open3 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Moxa SoftCMS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Open3 method of...

Moxa Industrial Managed Switch Cross-Site Scripting Vulnerability

Moxa EDS-405A/EDS-408A is a series of Ethernet switches. A cross-site scripting vulnerability exists in the embedded management web interface of the Moxa EDS-405A/EDS-408A, which can be exploited by remote attackers to inject arbitrary JS code...

PT-2015-3453

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and Moxa EDS-408A switches with firmware prior to 3.6 Description The issue is related to an uncontrolled resource consumption in the GoAhead web server of the affected switches. This can be exploited by a remote attacker to caus...

PT-2015-3454

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and EDS-408A switches with firmware prior to 3.6 Description The administrative web interface of the affected switches has a flaw in access control, allowing remote authenticated users to bypass a read-only protection mechanism...

PT-2015-3452

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and Moxa EDS-408A versions prior to 3.6 Description The issue is related to insufficient protection of the web page structure in the Diagnosis Ping feature of the administrative web interface. This can be exploited by a remote...

Moxa SoftCMS Buffer Overflow Vulnerability

Moxa SoftCMS is the centralized management software for managing large surveillance systems. Buffer overflow vulnerabilities exist in Moxa SoftCMS version 1.3 and earlier. A remote attacker can exploit these vulnerabilities to execute arbitrary code...

Moxa SoftCMS Buffer Overflow Vulnerability (CNVD-2015-05787)

Moxa SoftCMS is the centralized management software for managing large surveillance systems. Moxa SoftCMS 1.3 and prior versions have a punch zone overflow vulnerability. A remote attacker can exploit these vulnerabilities to execute arbitrary code...

Moxa OnCell Central Manager Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning hardcoded credentials and authentication bypass vulnerabilities in Moxa’s OnCell Central Manager Software. These vulnerabilities were reported to ZDI by security researcher Andrea Micalizzi. Moxa has released a...

Moxa VPort ActiveX SDK PLUS GetClientReg Name Parameter Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of VPort ActiveX SDK PLUS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Moxa VPort ActiveX SDK PLUS GetClientReg Model Parameter Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of VPort ActiveX SDK PLUS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Moxa Device Credential Retrieval

The Moxa protocol listens on 4800/UDP and will respond to broadcast or direct traffic. The service is known to be used on Moxa devices in the NPort, OnCell, and MGate product lines. Many devices with firmware versions older than 2017 or late 2016 allow admin credentials and SNMP read and read/wri...

Moxa Industrial Managed Switch Vulnerabilities

OVERVIEW Erwin Paternotte of Applied RiskApplied Risk Security Advisory AR2015001, Multiple Vulnerabilities in Moxa industrial manages switches, http://applied-risk.com/application/files/3414/4060/7148/AdvisoryMoxaMultipleVulnerabilities.pdf, web site last accessed September 3, 2015. has identifi...

CVE-2015-1000

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 aka SStreamVideo ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter...

Stack overflow

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 aka SStreamVideo ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter...

CVE-2015-1000

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 aka SStreamVideo ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter...

CVE-2015-1000

This CVE (CVE-2015-1000) affects Moxa SoftCMS prior to v1.3 and specifically the RTSPVIDEO.rtspvideoCtrl.1 ActiveX control. The vulnerability is a stack-based buffer overflow in the OpenForIPCamTest method (via the StrRtspPath parameter) that allows remote code execution. Exploitation is remote (...

CVE-2015-1000: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 aka SStreamVideo ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter...

Moxa SoftCMS Buffer Overflow Vulnerabilities

OVERVIEW NCCIC/ICS-CERT received a report from HP’s Zero Day Initiative ZDI concerning buffer overflow vulnerabilities in Moxa’s SoftCMS software package. These vulnerabilities were reported to ZDI by security researcher Carsten Eiram of Risk Based Security, who identified seven vulnerabilities,...