Auth bypass in Moxa Pt-7728
CVE-2016-4514
Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy.
Vulnerability class: Broken Access Control
EPSS: 0.009 (57.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.7 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L.
Affected products
- Moxa Pt-7728
- Moxa Pt-7728_firmware — versions 3.4
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2016-4514?
- CVE-2016-4514 is a high-severity vulnerability in Moxa Pt-7728, classified under Incorrect Authorization. CVSS score: 7.7/10. Published 2016-06-19.
- How severe is CVE-2016-4514?
- High severity. CVSS v3 base score is 7.7 out of 10.