Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

13 records

TI-2021-17455 CVE-2021-40390 · GHSA-wgcx-pj93-24xq

Hard-coded credentials in Moxa MXView Series

Priority HIGH 82

An authentication bypass vulnerability exists in the Web Application functionality of Moxa MXView Series 3.2.4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02456 Published 2022-04-14 No fix listed CWE-798
Priority LOW 36

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01808 Published 2021-10-12 No fix listed CWE-523
Priority MEDIUM 46

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01816 Published 2021-10-12 No fix listed CWE-74
Priority MEDIUM 59

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.15789 Published 2021-10-12 No fix listed CWE-284
Priority MEDIUM 44

A use of hard-coded password vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to gain access through accounts using default passwords

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01184 Published 2021-10-12 No fix listed CWE-259
Priority MEDIUM 43

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacker to create or overwrite critical files used to execute code, such as programs or libraries.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0165 Published 2021-10-12 No fix listed CWE-22
TI-2020-10616 CVE-2020-13537 · GHSA-9vx5-p3h2-529c

Incorrect default permissions in Moxa

Priority LOW 35

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00539 Published 2020-11-05 No fix listed CWE-276
TI-2020-10615 CVE-2020-13536 · GHSA-f9j2-hv33-h2gp

Incorrect default permissions in Moxa

Priority LOW 35

An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0055 Published 2020-11-05 No fix listed CWE-276
Priority LOW 37

The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attacker to decrypt encrypted information.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01911 Published 2018-04-06 No fix listed CWE-200