PT-2019-7836 · Moxa · Moxa Oncell G3251+4

Published 2019-03-21 · Updated 2020-02-10 · CVE-2016-5819

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Moxa G3100V2 Series versions prior to 2.8 Moxa OnCell G3111/G3151/G3211/G3251 Series versions prior to 1.7

Description The issue allows a reflected cross-site scripting attack, which may enable an attacker to execute arbitrary script code in the user's browser within the trust relationship between their browser and the server.

Recommendations For Moxa G3100V2 Series versions prior to 2.8, update to version 2.8 or later. For Moxa OnCell G3111/G3151/G3211/G3251 Series versions prior to 1.7, update to version 1.7 or later.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2016-5819

Affected Products

Moxa G3100V2 Series

Moxa Oncell G3111

Moxa Oncell G3151

Moxa Oncell G3211

Moxa Oncell G3251

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-5819 · Security Note
• https://osv.dev/vulnerability/CVE-2016-5819 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 · Note