CVE-2018-18392

3 documents3 sources

Severity

8.8HIGH

EPSS

0.4%

top 39.22%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Moxa Thingspro Iiot Gateway AND Device Management Software Solutions Moxa Thingspro

Timeline

PublishedOct 19

Latest updateMay 13

Description

Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5moxa/thingspro_iiot_gateway_and_device_management_software_solutions2.1

▶NVDmoxa/thingspro2.1

🔴Vulnerability Details

GHSA

GHSA-6r7m-73wx-5c8j: Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2↗2022-05-13

▶

CVEList

CVE-2018-18392: Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2↗2018-10-19

▶