PT-2022-5806 · Moxa · Moxa Vport 461A+1

Published 2022-01-13 · Updated 2022-01-13

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa VPORT 06EC-2V (affected versions not specified) Moxa VPort 461A (affected versions not specified)

Description The issue is related to pointer dereference errors when handling cookie parameters. This can allow a remote attacker to perform a brute force attack.

Recommendations For Moxa VPORT 06EC-2V, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Moxa VPort 461A, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2022-07211

Affected Products

Moxa Vport 06Ec-2V

Moxa Vport 461A

References · 2

• https://bdu.fstec.ru/vul/2022-07211 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/vport-06ec-2v-vport-461a-ip-cameras-video-servers-vulnerabilities · Note