Show filters
296 Total Results
Displaying 181-190 of 296
Sort by:
Attacker Value
Unknown
CVE-2018-19659
Disclosure Date: December 06, 2018 (last updated November 27, 2024)
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as the root user. This is similar to CVE-2017-12120.
0
Attacker Value
Unknown
CVE-2018-18393
Disclosure Date: October 19, 2018 (last updated November 27, 2024)
Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
0
Attacker Value
Unknown
CVE-2018-18394
Disclosure Date: October 19, 2018 (last updated November 27, 2024)
Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
0
Attacker Value
Unknown
CVE-2018-18391
Disclosure Date: October 19, 2018 (last updated November 27, 2024)
User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
0
Attacker Value
Unknown
CVE-2018-18395
Disclosure Date: October 19, 2018 (last updated November 27, 2024)
Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
0
Attacker Value
Unknown
CVE-2018-18392
Disclosure Date: October 19, 2018 (last updated November 27, 2024)
Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
0
Attacker Value
Unknown
CVE-2018-18396
Disclosure Date: October 19, 2018 (last updated November 27, 2024)
Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
0
Attacker Value
Unknown
CVE-2018-18390
Disclosure Date: October 19, 2018 (last updated November 27, 2024)
User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
0
Attacker Value
Unknown
CVE-2018-16282
Disclosure Date: September 20, 2018 (last updated November 27, 2024)
A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/net_WebCADELETEGetValue URI.
0
Attacker Value
Unknown
CVE-2018-10632
Disclosure Date: July 24, 2018 (last updated November 27, 2024)
In Moxa NPort 5210, 5230, and 5232 versions 2.9 build 17030709 and prior, the amount of resources requested by a malicious actor are not restricted, allowing for a denial-of-service condition.
0
