Moxa Thingspro vulnerabilities

7 known vulnerabilities affecting moxa/thingspro.

Total CVEs

7

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL4HIGH3

Vulnerabilities

Page 1 of 1

CVE-2018-18393CRITICALCVSS 9.8v2.12018-10-19

CVE-2018-18393 [CRITICAL] CVE-2018-18393: Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions ve Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CVE-2018-18395CRITICALCVSS 9.8v2.12018-10-19

CVE-2018-18395 [CRITICAL] CVE-2018-18395: Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CVE-2018-18394CRITICALCVSS 9.8v2.12018-10-19

CVE-2018-18394 [CRITICAL] CWE-312 CVE-2018-18394: Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Soft Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CVE-2018-18396CRITICALCVSS 9.8v2.12018-10-19

CVE-2018-18396 [CRITICAL] CVE-2018-18396: Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions versio Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CVE-2018-18390HIGHCVSS 7.5v2.12018-10-19

CVE-2018-18390 [HIGH] CWE-200 CVE-2018-18390: User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1 User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CVE-2018-18392HIGHCVSS 8.8v2.12018-10-19

CVE-2018-18392 [HIGH] CVE-2018-18392: Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

CVE-2018-18391HIGHCVSS 8.8v2.12018-10-19

CVE-2018-18391 [HIGH] CVE-2018-18391: User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions ve User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.