Lucene search
K

147 matches found

Vulnrichment
Vulnrichment
added 2024/09/21 4:7 a.m.15 views

CVE-2024-6785 MXview One and MXview One Central Manager Series store cleartext credentials in a local file

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...

6.8CVSS6.3AI score0.00076EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/09/21 4:7 a.m.20 views

CVE-2024-6785 MXview One and MXview One Central Manager Series store cleartext credentials in a local file

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...

6.8CVSS0.00076EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/21 12:0 a.m.3 views

MOXA MXview One Series 安全漏洞

MOXA MXview One Series is a series of network management software from China-based MOXA. A security vulnerability exists in MOXA MXview One Series that stems from allowing MQTT messages with path traversal sequences, which could lead to the disclosure of sensitive information...

6.5CVSS6.4AI score0.00542EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/21 12:0 a.m.1 views

MOXA MXview One Series 安全漏洞

MOXA MXview One Series is a series of network management software from China-based MOXA. A security vulnerability exists in MOXA MXview One Series that stems from the inclusion of a race condition issue. An attacker can exploit the vulnerability to write arbitrary files to the system...

6CVSS6.8AI score0.00373EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/09/21 12:0 a.m.1 views

MOXA MXview One Series 安全漏洞

MOXA MXview One Series is a series of network management software from China-based MOXA. A security vulnerability exists in MOXA MXview One Series that originates from storing credentials in plaintext...

7.1CVSS6.8AI score0.00076EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/07/16 12:0 a.m.2 views

PT-2024-7786 · Unknown · Mxview One +1

Name of the Vulnerable Software and Affected Versions: MXview One and MXview One Central Manager affected versions not specified Description: The configuration file stores credentials in cleartext, allowing an attacker with local access rights to read or modify the file. This could result in the...

7.1CVSS6.5AI score0.00076EPSS
Exploits0References11
Check Point Advisories
Check Point Advisories
added 2022/11/09 12:0 a.m.4 views

Moxa MXView Information Disclosure (CVE-2017-7455)

An information disclosure vulnerability exists in Moxa MXView. Successful exploitation of this vulnerability would allow a remote attacker to obtain sensitive information...

5CVSS2.9AI score0.39989EPSS
Exploits5
BDU FSTEC
BDU FSTEC
added 2022/11/02 12:0 a.m.0 views

The vulnerability of the Moxa MXView network control software lies in the improper restriction of the path name to the restricted access directory. This allows a violator to gain read, modify, or delete access to files.

The vulnerability of the Moxa MXView network control software relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to files...

7.8CVSS5.5AI score
Exploits0References1Affected Software1
Check Point Advisories
Check Point Advisories
added 2022/10/31 12:0 a.m.2 views

Moxa MXView Denial of Service (CVE-2017-7456)

A denial of service vulnerability exists in Moxa MXView. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

5CVSS4.8AI score0.10539EPSS
Exploits5
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.0 views

The vulnerability of the Moxa MXView network control software lies in its lack of functionality for checking the path name of the restricted access directory. This allows a violator to execute arbitrary code.

The vulnerability of the Moxa MXView network control software is related to deficiencies in checking the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS5.9AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.1 views

The vulnerability in the web interface of the Moxa MXView software control device allows a hacker to gain full access to the device.

The vulnerability of the Moxa MXView network control software web interface is related to the use of strictly encrypted login credentials. Exploiting this vulnerability allows a malicious actor to gain full access to the device by sending a specially crafted HTTP request...

10CVSS0.00328EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.0 views

The vulnerability of the Moxa MXView network control software lies in its lack of functionality for checking the path name of the restricted access directory. This allows attackers to read arbitrary files.

The vulnerability of the Moxa MXView network control software is related to deficiencies in checking the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files remotely...

7.8CVSS5.6AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.1 views

The vulnerability of the Moxa MXView network control software, related to the transmission of data in an open manner, allows a violator to disclose protected information.

The vulnerability of the Moxa MXView network control software lies in the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

7.8CVSS0.00148EPSS
Exploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/13 12:0 a.m.0 views

The vulnerability of the Moxa MXView network control software, related to improper code generation, allows a perpetrator to execute arbitrary code or increase their privileges.

The vulnerability of the Moxa MXView network control software is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or increase their privileges through a specially created module...

8.8CVSS6AI score
Exploits0References1
NVD
NVD
added 2022/04/14 8:15 p.m.9 views

CVE-2021-40390

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability...

10CVSS0.00328EPSS
Exploits1References1
OSV
OSV
added 2022/04/14 8:15 p.m.1 views

CVE-2021-40392

An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to exploit this vulnerability...

7.5CVSS7.3AI score0.00148EPSS
Exploits1References1
OSV
OSV
added 2022/04/14 8:15 p.m.1 views

CVE-2021-40390

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability...

9.8CVSS7.5AI score
Exploits0References1
NVD
NVD
added 2022/04/14 8:15 p.m.9 views

CVE-2021-40392

An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to exploit this vulnerability...

7.5CVSS0.00148EPSS
Exploits1References1
Prion
Prion
added 2022/04/14 8:15 p.m.10 views

Authentication flaw

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can lead to unauthorized access. An attacker can send an HTTP request to trigger this vulnerability...

7.5CVSS9.5AI score0.00328EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/04/14 8:15 p.m.12 views

Information disclosure

An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to exploit this vulnerability...

5CVSS7.1AI score0.00148EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder