CVE-2016-5812
published 2016-08-24CVE-2016-5812: Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local…
PriorityP49low3.3CVSS 3.0
AVLACLPRLUINSUCLINAN
EPSS
0.30%
21.9th percentile
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| moxa | oncell_g3001_firmware | <= 1.6 | — |
| moxa | oncell_g3100v2_firmware | <= 2.7 | — |
CVSS provenance
nvdv3.03.3LOWCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:P/I:N/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA ICS
Moxa OnCell Vulnerabilities (Update A)
cisa_ics·2016-08-23
Moxa OnCell Vulnerabilities (Update A)
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Moxa OnCell Vulnerabilities (Update A)
Last RevisedAugust 23, 2018
Alert CodeICSA-16-236-01A
## OVERVIEW
This updated advisory is a follow-up to the original advisory titled ICSA-16-236-01 Moxa OnCell Vulnerabilities that was published August 23, 2016, on the NCCIC/ICS-CERT web site.
Independent researcher Maxim Rupp has identified several vulnerabilities in Moxa’s OnCell products. Moxa has produced new firmware to mitigate these vulnerabilities.
These vulnerabilities could be exploited remotely.
## AFFECTED PRODUCTS
Moxa reports that the vulnerability affects the following
GHSA
GHSA-j549-w2g8-v63q: Moxa OnCell G3100V2 devices before 2
ghsa_unreviewed·2022-05-17
CVE-2016-5812 [LOW] CWE-200 GHSA-j549-w2g8-v63q: Moxa OnCell G3100V2 devices before 2
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-08-24
Published