Moxa

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-6458 1Moxa 1Softcms Nov 21, 2024 Mar 21, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
CVE-2015-6457 1Moxa 1Softcms Nov 21, 2024 Mar 21, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Moxa SoftCMS 1.3 and prior is susceptible to a buffer overflow condition that may crash or allow remote code execution. Moxa released SoftCMS version 1.4 on June 1, 2015, to address the vulnerability.
CVE-2016-5819 1Moxa 5Oncell G3100v2 Firmware Oncell G3111 FirmwareOncell G3151 Firmware+2 more Nov 21, 2024 Mar 21, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary...Show more Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.Show less
CVE-2019-6565 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script.
CVE-2019-6563 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Moxa IKS and EDS generate a predictable cookie calculated with an MD5 hash, allowing an attacker to capture the administrator's password, which could lead to a full compromise of the device.
CVE-2019-6561 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery has been identified in Moxa IKS and EDS, which may allow for the execution of unauthorized actions on the device.
CVE-2019-6559 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Moxa IKS and EDS allow remote authenticated users to cause a denial of service via a specially crafted packet, which may cause the switch to crash.
CVE-2019-6557 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
CVE-2019-6524 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to discover passwords via brute force attack.
CVE-2019-6522 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 9.1 CRITICAL· v3 8.5 HIGH· v2 Moxa IKS and EDS fails to properly check array bounds which may allow an attacker to read device memory on arbitrary addresses, and may allow an attacker to retrieve sensitive data or cause device reboot.
CVE-2019-6520 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Moxa IKS and EDS does not properly check authority on server side, which results in a read-only user being able to perform arbitrary configuration changes.
CVE-2019-6518 1Moxa 4Eds 405a Firmware Eds 408a FirmwareEds 510a Firmware+1 more Jun 17, 2026 Mar 5, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Moxa IKS and EDS store plaintext passwords, which may allow sensitive information to be read by someone with access to the device.
CVE-2018-19660 1Moxa 1Nport W2x50a Firmware Nov 21, 2024 Dec 6, 2018 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/...Show more An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/webSettingProfileSecurity can result in running OS commands as the root user.Show less
CVE-2018-19659 1Moxa 1Nport W2x50a Firmware Nov 21, 2024 Dec 6, 2018 N/A· v4 8.8 HIGH· v3 9.0 HIGH· v2 An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/...Show more An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as the root user. This is similar to CVE-2017-12120.Show less
CVE-2018-18396 1Moxa 1Thingspro Nov 21, 2024 Oct 19, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVE-2018-18395 1Moxa 1Thingspro Nov 21, 2024 Oct 19, 2018 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVE-2018-18394 1Moxa 1Thingspro Nov 21, 2024 Oct 19, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVE-2018-18393 1Moxa 1Thingspro Nov 21, 2024 Oct 19, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVE-2018-18392 1Moxa 1Thingspro Nov 21, 2024 Oct 19, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
CVE-2018-18391 1Moxa 1Thingspro Nov 21, 2024 Oct 19, 2018 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

Previous 1...8910...15 Next