İçeriğe atla
Noroxi

Moxa kayıtları

Moxa üreticisine ait 292 yayımlanmış kayıt. Bunların 0 tanesi sahada sömürüldü (CISA KEV listesinde), 3 tanesi için hazır saldırı aracı var.

Ürüne göre süzün ↓

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %1
Pre-auth RCE
30
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

292 kayıt
  • CVE-2016-9361
    60Bu hafta

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p

    KritikCVSS 9,8SilahlaştırılmışEPSS %20

    moxa · nport 5100 series firmware13 Şub 2017

  • CVE-2010-4742
    57Planlayın

    Stack-based buffer overflow in a certain ActiveX control in MediaDBPlayback.DLL 2.2.0.5 in the Moxa ActiveX SDK allows remote attackers to e

    KritikCVSS 10,0SilahlaştırılmışEPSS %56

    moxa · activex sdk18 Şub 2011

  • CVE-2022-40224
    49Planlayın

    A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1.

    YüksekCVSS 7,5İstismar yokEPSS %64

    moxa · sds-3008 firmware7 Şub 2023

  • CVE-2010-4741
    45Planlayın

    Stack-based buffer overflow in MDMUtil.dll in MDMTool.exe in MDM Tool before 2.3 in Moxa Device Manager allows remote MDM Gateways to execut

    KritikCVSS 9,3SilahlaştırılmışEPSS %27

    moxa · device manager18 Şub 2011

  • CVE-2021-38454
    45Planlayın

    Moxa MXview Network Management Software

    KritikCVSS 10,0İstismar yokEPSS %15

    moxa · mxview12 Eki 2021

  • CVE-2018-19660
    44Planlayın

    An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmw

    YüksekCVSS 8,8İstismar yokEPSS %28

    moxa · nport w2x50a firmware6 Ara 2018

  • CVE-2017-14459
    43Planlayın

    An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    moxa · awk-3131a firmware11 Nis 2018

  • CVE-2017-12128
    42Planlayın

    An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.

    YüksekCVSS 7,5İstismar yokEPSS %40

    moxa · edr-810 firmware14 May 2018

  • CVE-2016-9369
    42Planlayın

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p

    KritikCVSS 9,8İstismar yokEPSS %8

    moxa · nport 5100 series firmware13 Şub 2017

  • CVE-2019-5138
    41Planlayın

    An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.

    KritikCVSS 9,9İstismar yokEPSS %5

    moxa · awk-3131a firmware25 Şub 2020

  • CVE-2019-6557
    41Planlayın

    Several buffer overflow vulnerabilities have been identified in Moxa IKS and EDS, which may allow remote code execution.

    KritikCVSS 9,8İstismar yokEPSS %5

    moxa · iks-g6824a firmware5 Mar 2019

  • CVE-2016-8363
    41Planlayın

    An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127

    KritikCVSS 10,0İstismar yokEPSS %2

    moxa · oncellg3470a-lte firmware13 Şub 2017

  • CVE-2019-9099
    40Planlayın

    An issue was discovered on Moxa MGate MB3170 and MB3270 devices before 4.1, MB3280 and MB3480 devices before 3.1, MB3660 devices before 2.3,

    KritikCVSS 9,8İstismar yokEPSS %4

    moxa · mb3170 firmware11 Mar 2020

  • CVE-2016-5799
    40Planlayın

    Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempt

    KritikCVSS 9,8İstismar yokEPSS %4

    moxa · oncell g3001 firmware23 Ağu 2016

  • CVE-2021-46560
    40Planlayın

    The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.

    KritikCVSS 9,8İstismar yokEPSS %3

    moxa · tn-5900 firmware25 Oca 2022

  • CVE-2020-6989
    40Planlayın

    In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web serve

    KritikCVSS 9,8İstismar yokEPSS %3

    moxa · pt-7528-24tx-hv firmware24 Mar 2020

  • CVE-2020-23639
    40Planlayın

    A command injection vulnerability exists in Moxa Inc VPort 461 Series Firmware Version 3.4 or lower that could allow a remote attacker to ex

    KritikCVSS 9,8İstismar yokEPSS %3

    moxa · vport 461 firmware2 Kas 2020

  • CVE-2016-9366
    40Planlayın

    An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions p

    KritikCVSS 9,8İstismar yokEPSS %3

    moxa · nport 5100 series firmware13 Şub 2017

  • CVE-2016-5792
    40Planlayın

    SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields.

    KritikCVSS 9,8İstismar yokEPSS %3

    moxa · softcms7 Ağu 2016

  • CVE-2020-7007
    40Planlayın

    In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out

    KritikCVSS 9,8İstismar yokEPSS %2

    moxa · eds-g516e firmware24 Mar 2020

  • CVE-2016-4503
    40Planlayın

    Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vecto

    KritikCVSS 9,8İstismar yokEPSS %2

    moxa · device server web console 5232-n firmware11 Tem 2016

  • CVE-2021-32976
    40Planlayın

    Moxa NPort IAW5000A-I/O Series Serial Device Server Stack-based Buffer Overflow

    KritikCVSS 9,8İstismar yokEPSS %2

    moxa · nport iaw5150a-6i\/o firmware1 Nis 2022

  • CVE-2019-6524
    40Planlayın

    Moxa IKS and EDS do not implement sufficient measures to prevent multiple failed authentication attempts, which may allow an attacker to dis

    KritikCVSS 9,8İstismar yokEPSS %2

    moxa · iks-g6824a firmware5 Mar 2019

  • CVE-2020-28144
    40Planlayın

    Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 S

    KritikCVSS 9,8İstismar yokEPSS %2

    moxa · edr-g903 firmware3 Şub 2021

  • CVE-2021-32974
    40Planlayın

    Moxa NPort IAW5000A-I/O Series Serial Device Server Improper Input Validation

    KritikCVSS 9,8İstismar yokEPSS %2

    moxa · nport iaw5150a-6i\/o firmware1 Nis 2022