moxa Vulnerability Advisory Catalog

Total 289 security vulnerabilities recorded for moxa software and firmware.

← Back to All Vendors
Component: edr-810_firmware

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted ...

📅 2018-05-14
CVSS 7.5 Dossier →
Component: edr-810_firmware

A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could...

📅 2018-05-14
CVSS 4.4 Dossier →
Component: edr-810_firmware

An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafte...

📅 2018-05-14
CVSS 8.8 Dossier →
Component: edr-810_firmware

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP PO...

📅 2018-05-14
CVSS 8.8 Dossier →
Component: edr-810_firmware

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP UR...

📅 2018-05-14
CVSS 6.5 Dossier →
Component: edr-810_firmware

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317...

📅 2018-05-14
CVSS 8.8 Dossier →
Component: edr-810_firmware

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP PO...

📅 2018-05-14
CVSS 8.8 Dossier →
Component: edr-810_firmware

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP PO...

📅 2018-05-14
CVSS 8.8 Dossier →
CVE-2017-14459 CRITICAL
Component: awk-3131a_firmware

An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a...

📅 2018-04-11
CVSS 10.0 Dossier →
Component: mxview

The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a rem...

📅 2018-04-06
CVSS 7.5 Dossier →
CVE-2016-8717 CRITICAL
Component: awk-3131a_firmware

An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operati...

📅 2018-04-02
CVSS 9.8 Dossier →
CVE-2018-5455 CRITICAL
Component: oncell_g3110-hspa_firmware

A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and p...

📅 2018-03-05
CVSS 9.8 Dossier →
Component: oncell_g3110-hspa_firmware

An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An ...

📅 2018-03-05
CVSS 7.5 Dossier →
CVE-2018-5449 MEDIUM
Component: oncell_g3150-hspa-t_firmware

A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check ...

📅 2018-03-05
CVSS 6.5 Dossier →
Component: softnvr-ia_live_view

An Uncontrolled Search Path Element issue was discovered in Moxa SoftNVR-IA Live Viewer, Version 3.30.3122 and prior versions. An uncontrolled search ...

📅 2018-01-18
CVSS 7.2 Dossier →
CVE-2017-12729 CRITICAL
Component: softcms_lab_view

A SQL Injection issue was discovered in Moxa SoftCMS Live Viewer through 1.6. An improper neutralization of special elements used in an SQL command ('...

📅 2018-01-18
CVSS 9.8 Dossier →
Component: mxview

An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file acc...

📅 2018-01-12
CVSS 7.8 Dossier →
CVE-2017-16727 CRITICAL
Component: nport_w2150a_firmware

A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default passwo...

📅 2017-12-22
CVSS 9.1 Dossier →
CVE-2017-13701 CRITICAL
Component: eds-g512e_firmware

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no sa...

📅 2017-11-23
CVSS 9.8 Dossier →
Component: eds-g512e_firmware

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encrypti...

📅 2017-11-23
CVSS 7.5 Dossier →
Component: eds-g512e_firmware

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image availa...

📅 2017-11-23
CVSS 7.5 Dossier →
Component: eds-g512e_firmware

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur....

📅 2017-11-17
CVSS 7.5 Dossier →
Component: eds-g512e_firmware

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused....

📅 2017-11-17
CVSS 5.3 Dossier →
Component: eds-g512e_firmware

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface....

📅 2017-11-17
CVSS 4.8 Dossier →
Page 9 of 13 (289 Total Records)