Critical ICSA-18-060-02 3 CVEs

Moxa OnCell G3100-HSPA Series

Published Mar 1, 2018 · Updated Mar 1, 2018

Vendor: Moxa Product: OnCell G3100-HSPA Series

Summary

ATTENTION: Remotely exploitable/low skill level to exploit.

Vulnerabilities 3

Unscored —

CVE-2018-5449

A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. …

Mar 5, 2018
Unscored —

CVE-2018-5453

An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.…

Mar 5, 2018
Unscored —

CVE-2018-5455

A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series v…

Mar 5, 2018

Revision history

2018-03-01 #1
ICSA-18-060-02 Moxa OnCell G3100-HSPA Series

References

ICS Advisory ICSA-18-060-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-18-060-02
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/