Записи Moxa
292 опубликованных записей вендора moxa.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 3 · 1 %
- Pre-auth RCE
- 30
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')26
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor18
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')14
- CWE-319 Cleartext Transmission of Sensitive Information13
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer12
- CWE-352 Cross-Site Request Forgery (CSRF)10
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
292 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
60На этой неделе | CVE-2016-9361Готовый эксплойт | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pmoxa · nport 5100 series firmware · CWE-287 | Критическая9,8 | — | 20,3 % | 13 февр. 2017 г. |
57В плане | CVE-2010-4742Готовый эксплойт | Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to emoxa · activex sdk · CWE-119 | Критическая10,0 | — | 56,3 % | 18 февр. 2011 г. |
49В плане | CVE-2022-40224Эксплойта нет | A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.moxa · sds-3008 firmware · CWE-410 | Высокая7,5 | — | 64,6 % | 7 февр. 2023 г. |
45В плане | CVE-2010-4741Готовый эксплойт | Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to executmoxa · device manager · CWE-119 | Критическая9,3 | — | 27,8 % | 18 февр. 2011 г. |
45В плане | CVE-2021-38454Эксплойта нет | Moxa MXview Network Management Softwaremoxa · mxview · CWE-284 | Критическая10,0 | — | 15,7 % | 12 окт. 2021 г. |
44В плане | CVE-2018-19660Эксплойта нет | An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmwmoxa · nport w2x50a firmware · CWE-78 | Высокая8,8 | — | 28,8 % | 6 дек. 2018 г. |
43В плане | CVE-2017-14459Proof of concept | An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEmoxa · awk-3131a firmware · CWE-78 | Критическая9,8 | — | 12,6 % | 11 апр. 2018 г. |
42В плане | CVE-2017-12128Эксплойта нет | An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.moxa · edr-810 firmware · CWE-200 | Высокая7,5 | — | 40,7 % | 14 мая 2018 г. |
42В плане | CVE-2016-9369Эксплойта нет | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pmoxa · nport 5100 series firmware · CWE-287 | Критическая9,8 | — | 8,7 % | 13 февр. 2017 г. |
41В плане | CVE-2019-5138Эксплойта нет | An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.moxa · awk-3131a firmware · CWE-78 | Критическая9,9 | — | 5,1 % | 25 февр. 2020 г. |
41В плане | CVE-2019-6557Эксплойта нет | Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.moxa · iks-g6824a firmware · CWE-120 | Критическая9,8 | — | 5,0 % | 5 мар. 2019 г. |
41В плане | CVE-2016-8363Эксплойта нет | An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 moxa · oncellg3470a-lte firmware · CWE-264 | Критическая10,0 | — | 2,3 % | 13 февр. 2017 г. |
40В плане | CVE-2019-9099Эксплойта нет | An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,moxa · mb3170 firmware · CWE-120 | Критическая9,8 | — | 4,0 % | 11 мар. 2020 г. |
40В плане | CVE-2016-5799Эксплойта нет | Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attemptmoxa · oncell g3001 firmware · CWE-285 | Критическая9,8 | — | 4,0 % | 23 авг. 2016 г. |
40В плане | CVE-2021-46560Эксплойта нет | The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.moxa · tn-5900 firmware · CWE-77 | Критическая9,8 | — | 3,5 % | 25 янв. 2022 г. |
40В плане | CVE-2020-6989Эксплойта нет | In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web servemoxa · pt-7528-24tx-hv firmware · CWE-121 | Критическая9,8 | — | 3,4 % | 24 мар. 2020 г. |
40В плане | CVE-2020-23639Эксплойта нет | A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to exmoxa · vport 461 firmware · CWE-77 | Критическая9,8 | — | 3,1 % | 2 нояб. 2020 г. |
40В плане | CVE-2016-9366Эксплойта нет | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions pmoxa · nport 5100 series firmware · CWE-264 | Критическая9,8 | — | 3,0 % | 13 февр. 2017 г. |
40В плане | CVE-2016-5792Эксплойта нет | SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.moxa · softcms · CWE-89 | Критическая9,8 | — | 3,0 % | 7 авг. 2016 г. |
40В плане | CVE-2020-7007Эксплойта нет | In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go outmoxa · eds-g516e firmware · CWE-121 | Критическая9,8 | — | 2,9 % | 24 мар. 2020 г. |
40В плане | CVE-2016-4503Эксплойта нет | Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectomoxa · device server web console 5232-n firmware · CWE-287 | Критическая9,8 | — | 2,8 % | 11 июл. 2016 г. |
40В плане | CVE-2021-32976Эксплойта нет | Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflowmoxa · nport iaw5150a-6i\/o firmware · CWE-121 | Критическая9,8 | — | 2,7 % | 1 апр. 2022 г. |
40В плане | CVE-2019-6524Эксплойта нет | Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to dismoxa · iks-g6824a firmware · CWE-307 | Критическая9,8 | — | 2,7 % | 5 мар. 2019 г. |
40В плане | CVE-2021-32974Эксплойта нет | Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validationmoxa · nport iaw5150a-6i\/o firmware · CWE-20 | Критическая9,8 | — | 2,6 % | 1 апр. 2022 г. |
40В плане | CVE-2020-28144Эксплойта нет | Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Smoxa · edr-g903 firmware · CWE-119 | Критическая9,8 | — | 2,6 % | 3 февр. 2021 г. |
- CVE-2016-936160На этой неделе
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p
КритическаяCVSS 9,8Готовый эксплойтEPSS 20 %moxa · nport 5100 series firmware13 февр. 2017 г.
- CVE-2010-474257В плане
Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to e
КритическаяCVSS 10,0Готовый эксплойтEPSS 56 %moxa · activex sdk18 февр. 2011 г.
- CVE-2022-4022449В плане
A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.
ВысокаяCVSS 7,5Эксплойта нетEPSS 64 %moxa · sds-3008 firmware7 февр. 2023 г.
- CVE-2010-474145В плане
Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execut
КритическаяCVSS 9,3Готовый эксплойтEPSS 27 %moxa · device manager18 февр. 2011 г.
- CVE-2021-3845445В плане
Moxa MXview Network Management Software
КритическаяCVSS 10,0Эксплойта нетEPSS 15 %moxa · mxview12 окт. 2021 г.
- CVE-2018-1966044В плане
An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw
ВысокаяCVSS 8,8Эксплойта нетEPSS 28 %moxa · nport w2x50a firmware6 дек. 2018 г.
- CVE-2017-1445943В плане
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE
КритическаяCVSS 9,8Proof of conceptEPSS 12 %moxa · awk-3131a firmware11 апр. 2018 г.
- CVE-2017-1212842В плане
An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.
ВысокаяCVSS 7,5Эксплойта нетEPSS 40 %moxa · edr-810 firmware14 мая 2018 г.
- CVE-2016-936942В плане
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p
КритическаяCVSS 9,8Эксплойта нетEPSS 8 %moxa · nport 5100 series firmware13 февр. 2017 г.
- CVE-2019-513841В плане
An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.
КритическаяCVSS 9,9Эксплойта нетEPSS 5 %moxa · awk-3131a firmware25 февр. 2020 г.
- CVE-2019-655741В плане
Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %moxa · iks-g6824a firmware5 мар. 2019 г.
- CVE-2016-836341В плане
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %moxa · oncellg3470a-lte firmware13 февр. 2017 г.
- CVE-2019-909940В плане
An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %moxa · mb3170 firmware11 мар. 2020 г.
- CVE-2016-579940В плане
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempt
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %moxa · oncell g3001 firmware23 авг. 2016 г.
- CVE-2021-4656040В плане
The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %moxa · tn-5900 firmware25 янв. 2022 г.
- CVE-2020-698940В плане
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serve
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %moxa · pt-7528-24tx-hv firmware24 мар. 2020 г.
- CVE-2020-2363940В плане
A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to ex
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %moxa · vport 461 firmware2 нояб. 2020 г.
- CVE-2016-936640В плане
An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %moxa · nport 5100 series firmware13 февр. 2017 г.
- CVE-2016-579240В плане
SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.
КритическаяCVSS 9,8Эксплойта нетEPSS 3 %moxa · softcms7 авг. 2016 г.
- CVE-2020-700740В плане
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %moxa · eds-g516e firmware24 мар. 2020 г.
- CVE-2016-450340В плане
Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vecto
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %moxa · device server web console 5232-n firmware11 июл. 2016 г.
- CVE-2021-3297640В плане
Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %moxa · nport iaw5150a-6i\/o firmware1 апр. 2022 г.
- CVE-2019-652440В плане
Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to dis
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %moxa · iks-g6824a firmware5 мар. 2019 г.
- CVE-2021-3297440В плане
Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %moxa · nport iaw5150a-6i\/o firmware1 апр. 2022 г.
- CVE-2020-2814440В плане
Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 S
КритическаяCVSS 9,8Эксплойта нетEPSS 2 %moxa · edr-g903 firmware3 февр. 2021 г.