Read the docs

Moxa

Records329All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical79CVSS 9.0–10.0
CVSS high181CVSS 7.0–8.9

Exploited now

Moxa records in CISA KEV

No Moxa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Awk-3131a Firmware 28 records MEDIUM Edr-810 Firmware 21 records MEDIUM Awk-3121 Firmware 14 records MEDIUM Eds-405a Firmware 13 records MEDIUM Eds-408a Firmware 13 records MEDIUM Mxview 13 records HIGH Tn-5900 Firmware 11 records MEDIUM Eds-510a Firmware 10 records MEDIUM

Records

13 records in Mxview · all components

TI-2021-17455 CVE-2021-40390 · GHSA-wgcx-pj93-24xq

Hard-coded credentials in Moxa MXView Series

Priority HIGH 82

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02456 Published 2022-04-14 No fix listed CWE-798
TI-2021-16054 CVE-2021-38454 · GHSA-x75v-mvrc-2f88

Improper access control in Moxa MXview Network Management Software

Priority MEDIUM 59

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.15789 Published 2021-10-12 No fix listed CWE-284
TI-2021-16058 CVE-2021-38458 · GHSA-wvqc-pm32-wjgx

Injection in Moxa MXview Network Management Software

Priority MEDIUM 46

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01816 Published 2021-10-12 No fix listed CWE-74
TI-2021-16056 CVE-2021-38456 · GHSA-rqhq-r7rw-cwjc

Hard-coded credentials in Moxa MXview Network Management Software

Priority MEDIUM 44

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01184 Published 2021-10-12 No fix listed CWE-259
TI-2021-16052 CVE-2021-38452 · GHSA-5xx4-5hcg-xx45

Path traversal in Moxa MXview Network Management Software

Priority MEDIUM 43

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0165 Published 2021-10-12 No fix listed CWE-22
TI-2018-05415 CVE-2018-7506 · GHSA-3h32-9hq6-4rcq

Information disclosure in ICS-CERT Moxa MXview

Priority LOW 37

The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attacker to decrypt encrypted information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01911 Published 2018-04-06 No fix listed CWE-200
TI-2021-16060 CVE-2021-38460 · GHSA-j57w-g5v3-32qm

Path traversal in Moxa MXview Network Management Software

Priority LOW 36

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01808 Published 2021-10-12 No fix listed CWE-523
TI-2020-10616 CVE-2020-13537 · GHSA-9vx5-p3h2-529c

Incorrect default permissions in Moxa

Priority LOW 35

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00539 Published 2020-11-05 No fix listed CWE-276
TI-2020-10615 CVE-2020-13536 · GHSA-f9j2-hv33-h2gp

Incorrect default permissions in Moxa

Priority LOW 35

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0055 Published 2020-11-05 No fix listed CWE-276
Open these records in search →