PT-2019-7836 · Moxa · Moxa Oncell G3251+4

Publicado 2019-03-21 · Atualizado 2020-02-10 · CVE-2016-5819

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Moxa G3100V2 Series versions prior to 2.8 Moxa OnCell G3111/G3151/G3211/G3251 Series versions prior to 1.7

Description The issue allows a reflected cross-site scripting attack, which may enable an attacker to execute arbitrary script code in the user's browser within the trust relationship between their browser and the server.

Recommendations For Moxa G3100V2 Series versions prior to 2.8, update to version 2.8 or later. For Moxa OnCell G3111/G3151/G3211/G3251 Series versions prior to 1.7, update to version 1.7 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-5819

Produtos afetados

Moxa G3100V2 Series

Moxa Oncell G3111

Moxa Oncell G3151

Moxa Oncell G3211

Moxa Oncell G3251

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5819 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-5819 · Aviso do Fabricante
• https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 · Nota