CVE-2016-5799
published 2016-08-24CVE-2016-5799: Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it…
PriorityP359critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
4.00%
89.3th percentile
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | oncell_g3001_firmware | <= 1.6 | — |
| moxa | oncell_g3100v2_firmware | <= 2.7 | — |
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rcrj-xc4j-xjqv: Moxa OnCell G3100V2 devices before 2
ghsa_unreviewed·2022-05-17
CVE-2016-5799 [CRITICAL] CWE-285 GHSA-rcrj-xc4j-xjqv: Moxa OnCell G3100V2 devices before 2
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
CISA ICS
Moxa OnCell Vulnerabilities (Update A)
cisa_ics·2016-08-23
Moxa OnCell Vulnerabilities (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Moxa OnCell Vulnerabilities (Update A)
Last RevisedAugust 23, 2018
Alert CodeICSA-16-236-01A
## OVERVIEW
This updated advisory is a follow-up to the original advisory titled ICSA-16-236-01 Moxa OnCell Vulnerabilities that was published August 23, 2016, on the NCCIC/ICS-CERT web site.
Independent researcher Maxim Rupp has identified several vulnerabilities in Moxa’s OnCell products. Moxa has produced new firmware to mitigate these vulnerabilities.
These vulnerabilities could be exploited remotely.
## AFFECTED PRODUCTS
Moxa reports that the vulnerability affects the following
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-08-24
Published