PT-2016-4439 · Moxa · Moxa Secure Router Edr-G903

Publicado 2016-05-31 · Atualizado 2022-04-12 · CVE-2016-0879

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moxa Secure Router EDR-G903 versions prior to 3.4.12

Description The issue allows remote attackers to obtain sensitive information by requesting configuration and log files at an unspecified URL, as these files are not deleted after the import function is completed.

Recommendations For versions prior to 3.4.12, update to version 3.4.12 or later to resolve the issue.

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2016-0879

Produtos afetados

Moxa Secure Router Edr-G903

Referências · 3

• https://osv.dev/vulnerability/CVE-2016-0879 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0879 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01 · Nota