CVE-2021-38458

MXview Network Management Software (Moxa) versions 3.x–3.2.2 contain CVE-2021-38458, an improper neutralization of special elements that can lead to remote code execution. The issue is part of a set of chainable vulnerabilities (CVE-2021-38452/38454/38456/38460) that can enable pre-authenticated ...

CVE-2021-38458 Moxa MXview Network Management Software

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

CVE-2021-38454

CVE-2021-38454 affects Moxa MXview Network Management Software versions 3.x–3.2.2. It is described as a misconfigured service that allows remote MQTT connections, enabling attackers to interact with the MQTT broker and potentially trigger remote code execution via subsequent actions (e.g., comman...

CVE-2021-38454 Moxa MXview Network Management Software

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

CVE-2021-38456 Moxa MXview Network Management Software

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

CVE-2021-38456

CVE-2021-38456 affects Moxa MXview Network Management Software versions 3.x–3.2.2 and is caused by the use of hard-coded passwords. Impacted actors could gain access through default credentials, with a user impact described as high. The related materials indicate a high-severity, remotely exploit...

CVE-2021-38452 Moxa MXview Network Management Software

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

CVE-2021-38452

CVE-2021-38452 — Moxa MXview path traversal affects MXview Network Management Software, versions 3.x–3.2.2. The vulnerability is a path traversal in an unauthenticated route (/tmp) that allows reading arbitrary files, potentially exposing plaintext passwords and configuration data used to execute...

CVE-2021-38452: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

CVE-2021-38454: Improper Access Control

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

CVE-2021-38460: Unprotected Transport of Credentials

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

CVE-2021-38456: Use of Hard-coded Password

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords...

CVE-2021-38458: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

Moxa MXview Hardcoded Password Vulnerability

Moxa MXview is a network management software used to monitor and diagnose industrial networks.Moxa MXview is vulnerable to a hard-coded password vulnerability. An attacker could exploit this vulnerability to gain access through an account using the default password...

Moxa MXview has an unspecified vulnerability

Moxa MXview is a network management software used to monitor and diagnose industrial networks.A security vulnerability exists in Moxa MXview. An attacker could exploit the vulnerability to obtain credentials...

Moxa MXview path traversal vulnerability

Moxa MXview is a network management software used to monitor and diagnose industrial networks.Moxa MXview is vulnerable to a path traversal vulnerability. An attacker could exploit this vulnerability to create or overwrite critical files used to execute code...

Moxa MXview Code Injection Vulnerability

A code injection vulnerability exists in Moxa MXview, a network management software used to monitor and diagnose industrial networks. The vulnerability stems from improper neutralization of special elements in the output used by downstream components. An attacker could exploit the vulnerability t...

Moxa MXview Improper Access Control Vulnerability

An improper access control vulnerability exists in Moxa MXview, a network management software used to monitor and diagnose industrial networks. The vulnerability stems from the fact that the affected product has a misconfigured service that allows remote connections to internal communication...

CVE-2021-38460

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...

CVE-2021-38454

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries...