Critical ICSA-17-143-01 3 CVEs

Moxa OnCell

Published May 23, 2017 · Updated May 23, 2017

Vendor: Moxa Product: OnCell G3110-HSDPA Product: OnCell G3110-HSPA Product: OnCell G3150-HSDPA

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

Unscored —

CVE-2017-7913

A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previou…

May 29, 2017
Unscored —

CVE-2017-7915

An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3…

May 29, 2017
Unscored —

CVE-2017-7917

A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous ver…

May 29, 2017

Revision history

2017-05-23 #1
ICSA-17-143-01 Moxa OnCell

References

ICS Advisory ICSA-17-143-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-17-143-01
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-17-143-01