CVE-2016-9344

Published: Feb 13, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. An attacker may be able to brute force an active session cookie to be able to download configuration files.

Affected (3)

Products: Moxa: Miineport E1 Firmware, Miineport E2 Firmware, Miineport E3 Firmware

Moxa

3 products

Miineport E1 Firmware

Miineport E2 Firmware

Miineport E3 Firmware

Configuration A

3 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Moxa Miineport E1 Firmware	Up to 1.7
Moxa Miineport E2 Firmware	Up to 1.3
Moxa Miineport E3 Firmware	Up to 1.0

Running on/with	Platform Versions
Moxa Miineport E1	All versions
Moxa Miineport E2	All versions
Moxa Miineport E3	All versions

Related CWEs

CWE-532

Insertion of Sensitive Information into Log File

Information written to log files can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information.

References (4)

http://www.securityfocus.com/bid/94783

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-16-343-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/94783

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSA-16-343-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.