Unscored CVE-2015-6481 EUVD-2015-6422GHSA-4p5v-xhv3-w87m

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows rem…

Published Dec 21, 2015 · Updated Aug 6, 2024 · Assigned by icscert

Description

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session.

Advisories 1

ICSA-15-328-01 Moxa OnCell Central Manager Vulnerabilities CISA ICS & IT advisories · Jun 9, 2025

References

http://zerodayinitiative.com/advisories/ZDI-15-453/
https://ics-cert.us-cert.gov/advisories/ICSA-15-328-01