PT-2016-5089 · Moxa · Miineport E2 1242+4

Karn Ganeshen · Published 2016-05-31 · Updated 2016-11-30 · CVE-2016-2286

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moxa MiiNePort E1 4641 version 1.1.10 Build 09120714 Moxa MiiNePort E1 7080 version 1.1.10 Build 09120714 Moxa MiiNePort E2 1242 version 1.1 Build 10080614 Moxa MiiNePort E2 4561 version 1.1 Build 10080614 Moxa MiiNePort E3 version 1.0 Build 11071409

Description The issue is related to a blank default password in the affected devices, which allows remote attackers to obtain access via unspecified vectors.

Recommendations For Moxa MiiNePort E1 4641 version 1.1.10 Build 09120714, change the default password to a strong and unique one as soon as possible. For Moxa MiiNePort E1 7080 version 1.1.10 Build 09120714, change the default password to a strong and unique one as soon as possible. For Moxa MiiNePort E2 1242 version 1.1 Build 10080614, change the default password to a strong and unique one as soon as possible. For Moxa MiiNePort E2 4561 version 1.1 Build 10080614, change the default password to a strong and unique one as soon as possible. For Moxa MiiNePort E3 version 1.0 Build 11071409, change the default password to a strong and unique one as soon as possible.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2016-2286

Affected Products

Miineport E3

Miineport E1 4641

Miineport E1 7080

Miineport E2 1242

Miineport E2 4561

References · 4

• https://osv.dev/vulnerability/CVE-2016-2286 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2286 · Security Note
• http://seclists.org/fulldisclosure/2016/May/7 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01 · Note