What is CVE-2023-6094?

CVE-2023-6094 is a medium-severity vulnerability in Moxa Oncell G3150a-Lte, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2023-12-31.

How severe is CVE-2023-6094?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Moxa Oncell G3150a-Lte

CVE-2023-6094

A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target.

EPSS: 0.002 (15.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Moxa Oncell_g3150a-lte
Moxa Oncell_g3150a-lte_firmware
Moxa Oncell G3150a-lte Series — versions 1.0

Weakness classification (CWE)

CWE-319 — Cleartext Transmission of Sensitive Information

References

psirt@moxa.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-6094?: CVE-2023-6094 is a medium-severity vulnerability in Moxa Oncell G3150a-Lte, classified under Cleartext Transmission of Sensitive Information. CVSS score: 5.3/10. Published 2023-12-31.
How severe is CVE-2023-6094?: Medium severity. CVSS v3 base score is 5.3 out of 10.