CVE-2016-2295
published 2016-05-31CVE-2016-2295: Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices…
PriorityP342high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EPSS
1.50%
71.4th percentile
Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allow remote attackers to obtain sensitive cleartext information by reading a configuration file.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | miineport_e1_4641_firmware | — | — |
| moxa | miineport_e1_7080_firmware | — | — |
| moxa | miineport_e2_1242_firmware | — | — |
| moxa | miineport_e2_4561_firmware | — | — |
| moxa | miineport_e3_firmware | — | — |
CVSS provenance
nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j98q-5gf7-hcmc: Moxa MiiNePort_E1_4641 devices with firmware 1
ghsa_unreviewed·2022-05-17
CVE-2016-2295 [HIGH] CWE-200 GHSA-j98q-5gf7-hcmc: Moxa MiiNePort_E1_4641 devices with firmware 1
Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allow remote attackers to obtain sensitive cleartext information by reading a configuration file.
CISA ICS
Moxa MiiNePort Vulnerabilities (Update A)
cisa_ics·2016-05-24
Moxa MiiNePort Vulnerabilities (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Moxa MiiNePort Vulnerabilities (Update A)
Last RevisedAugust 23, 2018
Alert CodeICSA-16-145-01A
## OVERVIEW
This updated advisory is a follow-up to the original advisory titled ICSA-16-145-01 Moxa MiiNePort Vulnerabilities that was published May 24, 2016, on the NCCIC/ICS-CERT web site.
Independent researcher Karn Ganeshen has identified weak credential management, sensitive information not protected, and cross-site request forgery vulnerabilities in Moxa’s MiiNePort serial device server module series. Moxa will produce a beta patch firmware in late May 2016 to mitigate these v
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-05-31
Published