Moxa Miineport E3 vulnerabilities

5 vulnerabilities

Known vulnerabilities in Moxa Miineport E3, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8HighCVE-2016-2285moxa · miineport_e1_4641_firmware +4 moremoxa miineport_e1_4641_firmwareCross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allows remote attackers to hijack the authentication of arbitrary users.EPSS0.59%7.5HighCVE-2016-2286moxa · miineport_e1_4641_firmware +4 moremoxa miineport_e1_4641_firmwareMoxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 have a blank default password, which allows remote attackers to obtain access via unspecified vectors.EPSS1.43%7.5HighCVE-2016-2295moxa · miineport_e1_4641_firmware +4 moremoxa miineport_e1_4641_firmwareMoxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allow remote attackers to obtain sensitive cleartext information by reading a configuration file.EPSS1.50%7.5HighCVE-2016-9344moxa · miineport_e1_firmware +2 moremoxa miineport_e1_firmwareAn issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. An attacker may be able to brute force an active session cookie to be able to download configuration files.EPSS1.63%5.3MediumCVE-2016-9346moxa · miineport_e1_firmware +2 moremoxa miineport_e1_firmwareAn issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration data are stored in a file that is not encrypted.EPSS1.23%