PT-2016-6693 · Moxa · Moxa Oncell G3251+4

Publicado 2016-08-24 · Atualizado 2016-11-28 · CVE-2016-5812

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Baixa

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100V2 versions prior to 2.8 Moxa OnCell G3111 versions prior to 1.7 Moxa OnCell G3151 versions prior to 1.7 Moxa OnCell G3211 versions prior to 1.7 Moxa OnCell G3251 versions prior to 1.7

Description The issue allows local users to easily obtain sensitive information by reading a configuration file due to the use of cleartext password storage.

Recommendations For Moxa OnCell G3100V2 versions prior to 2.8, update to version 2.8 or later. For Moxa OnCell G3111 versions prior to 1.7, update to version 1.7 or later. For Moxa OnCell G3151 versions prior to 1.7, update to version 1.7 or later. For Moxa OnCell G3211 versions prior to 1.7, update to version 1.7 or later. For Moxa OnCell G3251 versions prior to 1.7, update to version 1.7 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2016-5812

Produtos afetados

Moxa Oncell G3100V2

Moxa Oncell G3111

Moxa Oncell G3151

Moxa Oncell G3211

Moxa Oncell G3251

Referências · 4

• https://osv.dev/vulnerability/CVE-2016-5812 · Aviso do Fabricante
• http://securityfocus.com/bid/92605 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-5812 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 · Nota