Information disclosure in Moxa Miineport E1
CVE-2016-9344
An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. An attacker may be able to brute force an active session cookie to be able to download configuration files.
EPSS: 0.016 (73.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Moxa Miineport_e1
- Moxa Miineport_e1_firmware
- Moxa Miineport_e2
- Moxa Miineport_e2_firmware
- Moxa Miineport_e3
- Moxa Miineport_e3_firmware
- N/a Moxa Miineport — versions Moxa MiiNePort
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
- ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2016-9344?
- CVE-2016-9344 is a high-severity vulnerability in Moxa Miineport E1, classified under Insertion of Sensitive Information into Log File. CVSS score: 7.5/10. Published 2017-02-13.
- How severe is CVE-2016-9344?
- High severity. CVSS v3 base score is 7.5 out of 10.