Show filters
296 Total Results
Displaying 281-290 of 296
Sort by:
Attacker Value
Unknown
CVE-2016-0875
Disclosure Date: May 31, 2016 (last updated November 25, 2024)
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL.
0
Attacker Value
Unknown
CVE-2016-0878
Disclosure Date: May 31, 2016 (last updated November 25, 2024)
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests.
0
Attacker Value
Unknown
CVE-2016-2283
Disclosure Date: March 04, 2016 (last updated November 25, 2024)
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt data, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-2282
Disclosure Date: March 04, 2016 (last updated November 25, 2024)
Moxa ioLogik E2200 devices before 3.12 and ioAdmin Configuration Utility before 3.18 do not properly encrypt credentials, which makes it easier for remote attackers to obtain the associated cleartext via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-6481
Disclosure Date: December 21, 2015 (last updated November 25, 2024)
The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session.
0
Attacker Value
Unknown
CVE-2015-6480
Disclosure Date: December 21, 2015 (last updated November 25, 2024)
The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action.
0
Attacker Value
Unknown
CVE-2015-6464
Disclosure Date: September 11, 2015 (last updated October 05, 2023)
The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin.
0
Attacker Value
Unknown
CVE-2015-6465
Disclosure Date: September 11, 2015 (last updated October 05, 2023)
The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service (reboot) via a crafted URL.
0
Attacker Value
Unknown
CVE-2015-6466
Disclosure Date: September 11, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field.
0
Attacker Value
Unknown
CVE-2015-1000
Disclosure Date: June 05, 2015 (last updated October 05, 2023)
Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 (aka SStreamVideo) ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter.
0
