Moxa kayıtları
moxa üreticisine ait 292 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 3 · %1
- Pre-auth RCE
- 30
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')26
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor18
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14
- CWE-319 Cleartext Transmission of Sensitive Information13
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer12
- CWE-352 Cross-Site Request Forgery (CSRF)10
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
292 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
57Planlayın | CVE-2010-4742Silahlaştırılmış | Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to emoxa · activex sdk · CWE-119 | Kritik10,0 | — | %56,4 | 18 Şub 2011 |
49Planlayın | CVE-2022-40224İstismar yok | A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.moxa · sds-3008 firmware · CWE-410 | Yüksek7,5 | — | %64,7 | 7 Şub 2023 |
45Planlayın | CVE-2010-4741Silahlaştırılmış | Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to executmoxa · device manager · CWE-119 | Kritik9,3 | — | %27,8 | 18 Şub 2011 |
45Planlayın | CVE-2016-9361Silahlaştırılmış | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pmoxa · nport 5100 series firmware · CWE-287 | Kritik9,8 | — | %19,9 | 13 Şub 2017 |
45Planlayın | CVE-2021-38454İstismar yok | Moxa MXview Network Management Softwaremoxa · mxview · CWE-284 | Kritik10,0 | — | %15,8 | 12 Eki 2021 |
44Planlayın | CVE-2018-19660İstismar yok | An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmwmoxa · nport w2x50a firmware · CWE-78 | Yüksek8,8 | — | %28,8 | 6 Ara 2018 |
43Planlayın | CVE-2017-14459Kavram kanıtı | An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEmoxa · awk-3131a firmware · CWE-78 | Kritik9,8 | — | %12,6 | 11 Nis 2018 |
42Planlayın | CVE-2017-12128İstismar yok | An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.moxa · edr-810 firmware · CWE-200 | Yüksek7,5 | — | %40,7 | 14 May 2018 |
42Planlayın | CVE-2016-9369İstismar yok | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pmoxa · nport 5100 series firmware · CWE-287 | Kritik9,8 | — | %8,8 | 13 Şub 2017 |
41Planlayın | CVE-2019-5138İstismar yok | An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.moxa · awk-3131a firmware · CWE-78 | Kritik9,9 | — | %5,2 | 25 Şub 2020 |
41Planlayın | CVE-2019-6557İstismar yok | Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.moxa · iks-g6824a firmware · CWE-120 | Kritik9,8 | — | %5,0 | 5 Mar 2019 |
41Planlayın | CVE-2016-8363İstismar yok | An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 moxa · oncellg3470a-lte firmware · CWE-264 | Kritik10,0 | — | %2,4 | 13 Şub 2017 |
40Planlayın | CVE-2019-9099İstismar yok | An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,moxa · mb3170 firmware · CWE-120 | Kritik9,8 | — | %4,0 | 11 Mar 2020 |
40Planlayın | CVE-2016-5799İstismar yok | Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attemptmoxa · oncell g3001 firmware · CWE-285 | Kritik9,8 | — | %4,0 | 23 Ağu 2016 |
40Planlayın | CVE-2021-46560İstismar yok | The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.moxa · tn-5900 firmware · CWE-77 | Kritik9,8 | — | %3,6 | 25 Oca 2022 |
40Planlayın | CVE-2020-6989İstismar yok | In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web servemoxa · pt-7528-24tx-hv firmware · CWE-121 | Kritik9,8 | — | %3,5 | 24 Mar 2020 |
40Planlayın | CVE-2020-23639İstismar yok | A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to exmoxa · vport 461 firmware · CWE-77 | Kritik9,8 | — | %3,2 | 2 Kas 2020 |
40Planlayın | CVE-2016-9366İstismar yok | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pmoxa · nport 5100 series firmware · CWE-264 | Kritik9,8 | — | %3,1 | 13 Şub 2017 |
40Planlayın | CVE-2016-5792İstismar yok | SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.moxa · softcms · CWE-89 | Kritik9,8 | — | %3,0 | 7 Ağu 2016 |
40Planlayın | CVE-2020-7007İstismar yok | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go outmoxa · eds-g516e firmware · CWE-121 | Kritik9,8 | — | %2,9 | 24 Mar 2020 |
40Planlayın | CVE-2016-4503İstismar yok | Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectomoxa · device server web console 5232-n firmware · CWE-287 | Kritik9,8 | — | %2,8 | 11 Tem 2016 |
40Planlayın | CVE-2021-32976İstismar yok | Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflowmoxa · nport iaw5150a-6i\/o firmware · CWE-121 | Kritik9,8 | — | %2,8 | 1 Nis 2022 |
40Planlayın | CVE-2019-6524İstismar yok | Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to dismoxa · iks-g6824a firmware · CWE-307 | Kritik9,8 | — | %2,7 | 5 Mar 2019 |
40Planlayın | CVE-2021-32974İstismar yok | Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validationmoxa · nport iaw5150a-6i\/o firmware · CWE-20 | Kritik9,8 | — | %2,7 | 1 Nis 2022 |
40Planlayın | CVE-2020-28144İstismar yok | Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Smoxa · edr-g903 firmware · CWE-119 | Kritik9,8 | — | %2,6 | 3 Şub 2021 |
- CVE-2010-474257Planlayın
Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to e
KritikCVSS 10,0SilahlaştırılmışEPSS %56moxa · activex sdk18 Şub 2011
- CVE-2022-4022449Planlayın
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.
YüksekCVSS 7,5İstismar yokEPSS %65moxa · sds-3008 firmware7 Şub 2023
- CVE-2010-474145Planlayın
Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execut
KritikCVSS 9,3SilahlaştırılmışEPSS %28moxa · device manager18 Şub 2011
- CVE-2016-936145Planlayın
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p
KritikCVSS 9,8SilahlaştırılmışEPSS %20moxa · nport 5100 series firmware13 Şub 2017
- CVE-2021-3845445Planlayın
Moxa MXview Network Management Software
KritikCVSS 10,0İstismar yokEPSS %16moxa · mxview12 Eki 2021
- CVE-2018-1966044Planlayın
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw
YüksekCVSS 8,8İstismar yokEPSS %29moxa · nport w2x50a firmware6 Ara 2018
- CVE-2017-1445943Planlayın
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE
KritikCVSS 9,8Kavram kanıtıEPSS %13moxa · awk-3131a firmware11 Nis 2018
- CVE-2017-1212842Planlayın
An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.
YüksekCVSS 7,5İstismar yokEPSS %41moxa · edr-810 firmware14 May 2018
- CVE-2016-936942Planlayın
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p
KritikCVSS 9,8İstismar yokEPSS %9moxa · nport 5100 series firmware13 Şub 2017
- CVE-2019-513841Planlayın
An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.
KritikCVSS 9,9İstismar yokEPSS %5moxa · awk-3131a firmware25 Şub 2020
- CVE-2019-655741Planlayın
Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
KritikCVSS 9,8İstismar yokEPSS %5moxa · iks-g6824a firmware5 Mar 2019
- CVE-2016-836341Planlayın
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127
KritikCVSS 10,0İstismar yokEPSS %2moxa · oncellg3470a-lte firmware13 Şub 2017
- CVE-2019-909940Planlayın
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
KritikCVSS 9,8İstismar yokEPSS %4moxa · mb3170 firmware11 Mar 2020
- CVE-2016-579940Planlayın
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempt
KritikCVSS 9,8İstismar yokEPSS %4moxa · oncell g3001 firmware23 Ağu 2016
- CVE-2021-4656040Planlayın
The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.
KritikCVSS 9,8İstismar yokEPSS %4moxa · tn-5900 firmware25 Oca 2022
- CVE-2020-698940Planlayın
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serve
KritikCVSS 9,8İstismar yokEPSS %3moxa · pt-7528-24tx-hv firmware24 Mar 2020
- CVE-2020-2363940Planlayın
A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to ex
KritikCVSS 9,8İstismar yokEPSS %3moxa · vport 461 firmware2 Kas 2020
- CVE-2016-936640Planlayın
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p
KritikCVSS 9,8İstismar yokEPSS %3moxa · nport 5100 series firmware13 Şub 2017
- CVE-2016-579240Planlayın
SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.
KritikCVSS 9,8İstismar yokEPSS %3moxa · softcms7 Ağu 2016
- CVE-2020-700740Planlayın
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out
KritikCVSS 9,8İstismar yokEPSS %3moxa · eds-g516e firmware24 Mar 2020
- CVE-2016-450340Planlayın
Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vecto
KritikCVSS 9,8İstismar yokEPSS %3moxa · device server web console 5232-n firmware11 Tem 2016
- CVE-2021-3297640Planlayın
Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow
KritikCVSS 9,8İstismar yokEPSS %3moxa · nport iaw5150a-6i\/o firmware1 Nis 2022
- CVE-2019-652440Planlayın
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to dis
KritikCVSS 9,8İstismar yokEPSS %3moxa · iks-g6824a firmware5 Mar 2019
- CVE-2021-3297440Planlayın
Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation
KritikCVSS 9,8İstismar yokEPSS %3moxa · nport iaw5150a-6i\/o firmware1 Nis 2022
- CVE-2020-2814440Planlayın
Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 S
KritikCVSS 9,8İstismar yokEPSS %3moxa · edr-g903 firmware3 Şub 2021