Browse CVEs

HIGH 8.8 CVE-2018-10703 An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troublesho… Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 HIGH 8.1 CVE-2018-10690 An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism f… Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 HIGH 8.1 CVE-2018-10694 An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism … Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 HIGH 7.5 CVE-2018-10691 An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, th… Awk 3121 Firmware No fix yet Fix from $1,9502019-06-07 MEDIUM 6.1 CVE-2018-10692 An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who i… Awk 3121 Firmware No fix yet Fix from $1,6002019-06-07 MEDIUM 6.1 CVE-2018-10700EPSS 38% An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However,… Awk 3121 Firmware No fix yet Fix from $1,6002019-06-07 CRITICAL 9.8 CVE-2019-6526 Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Vers… Iks G6824a Firmware after 4.5 Fix from $2,3002019-04-15 HIGH 8.8 CVE-2015-6457 Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version… Softcms after 1.3 Fix from $1,9502019-03-21 HIGH 8.8 CVE-2015-6458 Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version… Softcms after 1.3 Fix from $1,9502019-03-21 MEDIUM 6.1 CVE-2016-5819 Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross… Oncell G3100v2 Firmware 1.7 / 2.8+ Fix from $1,6002019-03-21 CRITICAL 9.8 CVE-2019-6524 Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover pas… Iks G6824a Firmware after 4.5 Fix from $2,3002019-03-05 CRITICAL 9.8 CVE-2019-6557EPSS 5% Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution. Iks G6824a Firmware after 4.5 Fix from $2,3002019-03-05 CRITICAL 9.8 CVE-2019-6563 Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could… Iks G6824a Firmware after 4.5 Fix from $2,3002019-03-05 CRITICAL 9.1 CVE-2019-6522 Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an atta… Iks G6824a Firmware after 4.5 Fix from $2,3002019-03-05 HIGH 8.8 CVE-2019-6561 Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device. Iks G6824a Firmware after 4.5 Fix from $1,9502019-03-05 HIGH 7.5 CVE-2019-6518 Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device. Iks G6824a Firmware after 4.5 Fix from $1,9502019-03-05 HIGH 7.5 CVE-2019-6520 Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration ch… Iks G6824a Firmware after 4.5 Fix from $1,9502019-03-05 MEDIUM 6.5 CVE-2019-6559 Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash. Iks G6824a Firmware after 4.5 Fix from $1,6002019-03-05 MEDIUM 6.1 CVE-2019-6565 Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which … Iks G6824a Firmware after 4.5 Fix from $1,6002019-03-05 HIGH 8.8 CVE-2018-19659 An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware befor… Nport W2x50a Firmware 2.2+ Fix from $1,9502018-12-06 HIGH 8.8 CVE-2018-19660EPSS 29% An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware befor… Nport W2x50a Firmware 2.2+ Fix from $1,9502018-12-06 CRITICAL 9.8 CVE-2018-18393 Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Thingspro Mitigation only Fix from $2,3002018-10-19 CRITICAL 9.8 CVE-2018-18394 Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Thingspro Mitigation only Fix from $2,3002018-10-19 CRITICAL 9.8 CVE-2018-18395 Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Thingspro No fix yet Fix from $2,3002018-10-19 CRITICAL 9.8 CVE-2018-18396 Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Thingspro No fix yet Fix from $2,3002018-10-19 HIGH 8.8 CVE-2018-18391 User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Thingspro Mitigation only Fix from $1,9502018-10-19 HIGH 8.8 CVE-2018-18392 Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Thingspro Mitigation only Fix from $1,9502018-10-19 HIGH 7.5 CVE-2018-18390 User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1. Thingspro Mitigation only Fix from $1,9502018-10-19 HIGH 8.8 CVE-2018-16282EPSS 5% A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS… Edr 810 Firmware No fix yet Fix from $1,9502018-09-20 HIGH 7.5 CVE-2018-10632 In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, … Nport 5230 Firmware Mitigation only Fix from $1,9502018-07-24