Design/Logic Flaw

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere...

CVE-2012-3039

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere...

CVE-2012-3039

The CVE affects Moxa OnCell Gateway models G3111, G3151, G3211, and G3251 with firmware prior to 1.4. The root cause is insufficient entropy when generating SSH/SSL keys, enabling an attacker to determine private keys and gain unauthorized access remotely. Public sources (NVD/Red Hat/ICS-CERT con...

CVE-2012-3039: Undefined Security Weakness

Moxa OnCell Gateway G3111, G3151, G3211, and G3251 devices with firmware before 1.4 do not use a sufficient source of entropy for SSH and SSL keys, which makes it easier for remote attackers to obtain access by leveraging knowledge of a key from a product installation elsewhere...

PT-2013-1569

Name of the Vulnerable Software and Affected Versions Moxa OnCell Gateway versions prior to 1.4 Description The issue is related to insufficient entropy for SSH and SSL keys, making it easier for remote attackers to gain access by leveraging knowledge of a key from another product installation...

MOXA Weak Entropy in DSA Keys Vulnerability

Overview Researcher Nadia Heninger of the University of California, San Diego, and researchers Zakir Durumeric, Eric Wustrow, and J. Alex Halderman of the University of Michigan identified an insufficient entropy vulnerability in MOXA OnCell Gateways. MOA produced and released a firmware upgrade ...

Moxa Device Detection

Binary data 6759.prm...

Moxa NPort Unprotected Console (Telnet)

The remote Moxa NPort Telnet Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Moxa NPort Unprotected Console (HTTP)

The remote Moxa NPort Web Console is not protected by a password. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...

CVE-2012-4694

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...

CVE-2012-4712

Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors...

Information disclosure

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...

Hardcoded credentials

Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors...

CVE-2012-4694

CVE-2012-4694 affects Moxa EDR-G903 series routers with firmware prior to 2.11. The root cause is insufficient entropy when generating SSH and SSL keys, enabling potential MITM attacks by deriving or predicting host keys. Impact includes potential compromise of confidentiality and integrity of co...

CVE-2012-4712

Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors...

CVE-2012-4694

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...

CVE-2012-4712

CVE-2012-4712 affects Moxa EDR-G903 series routers. Root cause: a hard-coded account present in firmware prior to version 2.11, enabling remote attackers to obtain unspecified device access via unknown vectors. Impact: potential unauthorized access to the router, with confidentiality/integrity co...

CVE-2012-4712: Use of Hard-coded Credentials

Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors...

PT-2013-1711

Name of the Vulnerable Software and Affected Versions Moxa EDR-G903 series routers versions prior to 2.11 Description The issue concerns a hardcoded account in the affected routers, allowing remote attackers to gain unspecified device access. Recommendations For versions prior to 2.11, update the...

CVE-2012-4694: Undefined Security Weakness

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...