Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-6785 EUVD-2024-47815GHSA-8hgr-rp5m-j4mg

MXview One and MXview One Central Manager Series store cleartext credentials in a local file

Published Sep 21, 2024 · Updated Sep 26, 2024 · Assigned by Moxa

Description

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.

Affected products

VendorProductAffectedFixed
Moxa MXview One Series < 1.3.0 1.3.0
Moxa MXview One Central Manager Series < 1.0.0 1.0.0

Advisories 1

References