PT-2016-6693 · Moxa · Moxa Oncell G3251+4

Published 2016-08-24 · Updated 2016-11-28 · CVE-2016-5812

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moxa OnCell G3100V2 versions prior to 2.8 Moxa OnCell G3111 versions prior to 1.7 Moxa OnCell G3151 versions prior to 1.7 Moxa OnCell G3211 versions prior to 1.7 Moxa OnCell G3251 versions prior to 1.7

Description The issue allows local users to easily obtain sensitive information by reading a configuration file due to the use of cleartext password storage.

Recommendations For Moxa OnCell G3100V2 versions prior to 2.8, update to version 2.8 or later. For Moxa OnCell G3111 versions prior to 1.7, update to version 1.7 or later. For Moxa OnCell G3151 versions prior to 1.7, update to version 1.7 or later. For Moxa OnCell G3211 versions prior to 1.7, update to version 1.7 or later. For Moxa OnCell G3251 versions prior to 1.7, update to version 1.7 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5812

Affected Products

Moxa Oncell G3100V2

Moxa Oncell G3111

Moxa Oncell G3151

Moxa Oncell G3211

Moxa Oncell G3251

References · 4

• https://osv.dev/vulnerability/CVE-2016-5812 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5812 · Security Note
• http://securityfocus.com/bid/92605 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 · Note