Browse CVEs

CRITICAL 9.8 CVE-2023-28697 Moxa MiiNePort E1 has a vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to perform arbitr… Miineport E1 Firmware Mitigation only Fix from $2,3002023-04-27 HIGH 8.2 CVE-2022-2044 MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that may allow an attacker to overwrite values in memory, causing a d… Nport 5110 Firmware Mitigation only Fix from $1,9502022-08-31 HIGH 7.5 CVE-2022-2043 MOXA NPort 5110: Firmware Versions 2.10 is vulnerable to an out-of-bounds write that can cause the device to become unresponsive. Nport 5110 Firmware Mitigation only Fix from $1,9502022-08-31 CRITICAL 9.8 CVE-2021-40390 An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. A specially-crafted HTTP request can … Mxview No fix yet Fix from $2,3002022-04-14 HIGH 7.5 CVE-2021-40392 An information disclosure vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4. Network sniffing can lead to a discl… Mxview No fix yet Fix from $1,9502022-04-14 HIGH 8.8 CVE-2021-39279 Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell… Wac 2004 Firmware No fix yet Fix from $1,9502021-09-07 MEDIUM 6.1 CVE-2021-39278 Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.… Wac 2004 Firmware No fix yet Fix from $1,6002021-09-07 HIGH 7.5 CVE-2021-33823 An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attacker could send a huge amount of TCP SYN packet to make web service's re… Mgate Mb3180 Firmware No fix yet Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-33824 An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which c… Mgate Mb3180 Firmware No fix yet Fix from $1,9502021-06-18 HIGH 7.5 CVE-2021-25845 Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial… Vport 06ec 2v26m Firmware Mitigation only Fix from $1,9502021-05-10 HIGH 7.8 CVE-2020-13536 An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on t… Mxview No fix yet Fix from $1,9502020-11-05 HIGH 7.8 CVE-2020-13537 An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on t… Mxview No fix yet Fix from $1,9502020-11-05 HIGH 8.8 CVE-2019-5162 An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 7.2 CVE-2019-5165 An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configu… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 CRITICAL 9.9 CVE-2019-5138EPSS 5% An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A spe… Awk 3131a Firmware No fix yet Fix from $2,3002020-02-25 HIGH 8.8 CVE-2019-5136 An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A specially cra… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 8.8 CVE-2019-5140 An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted di… Awk 3131a Firmware Mitigation only Fix from $1,9502020-02-25 HIGH 8.8 CVE-2019-5141 An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted i… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 8.8 CVE-2019-5143 An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A speci… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 8.8 CVE-2019-5153 An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 7.5 CVE-2019-5137 The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 7.5 CVE-2019-5148 An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted… Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 7.2 CVE-2019-5142EPSS 7% An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted … Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 HIGH 7.1 CVE-2019-5139 An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13. The device … Awk 3131a Firmware No fix yet Fix from $1,9502020-02-25 CRITICAL 9.8 CVE-2018-10698 An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has b… Awk 3121 Firmware No fix yet Fix from $2,3002019-06-07 HIGH 8.8 CVE-2018-10693 An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the… Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 HIGH 8.8 CVE-2018-10695 An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account wh… Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 HIGH 8.8 CVE-2018-10696 An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, t… Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 HIGH 8.8 CVE-2018-10697 An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls … Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 HIGH 8.8 CVE-2018-10699 An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a… Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07