CVE-2024-6785

Published: Sep 21, 2024Modified: Jun 17, 2026

6.8

Vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Show more

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XShow less

Source: psirt@moxa.com (Secondary)

Description

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.

Affected (2)

Products: Moxa: Mxview One, Mxview One Central Manager

2 products

Mxview One Central Manager

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Moxa Mxview One	Before 1.4.1
Moxa Mxview One Central Manager	Version 1.0.0

Related CWEs

Cleartext Storage of Sensitive Information

The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.

Cleartext Storage in a File or on Disk

The product stores sensitive information in cleartext in a file, or on disk.

References (2)

https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05

Source: psirt@moxa.com

Third Party AdvisoryUS Government Resource

https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series

Source: psirt@moxa.com

PatchVendor Advisory

Timeline

No history available yet.