CVE-2015-6481

High

Published: 21/12/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The login function in the RequestController class in Moxa OnCell Central Manager before version 2.2 has a hardcoded root password, allowing remote attackers to gain administrative access via a login session.

Risk Assessment

This vulnerability allows attackers to take control of the system, potentially leading to serious data security breaches.

Recommendation

It is recommended to update Moxa OnCell Central Manager to the latest version to remove the hardcoded password and implement strong password policies.

Other vulnerabilities in Moxa OnCell Central Manager

CVE-2015-6480High
The MessageBrokerServlet servlet in Moxa OnCell Central Manager before version 2.2 does not require authentication, allowing remote attackers to gain administrative access via a command, such as the addUserAndGroup action.

Original NVD description (English source)

The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative access via a login session.