CVE-2016-2285
HighSummary
There is a cross-site request forgery (CSRF) vulnerability in Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices. This allows remote attackers to hijack the authentication of arbitrary users.
Risk Assessment
This vulnerability may lead to unauthorized access to systems and data, posing a serious threat to the organization's security.
Recommendation
It is recommended to update the firmware of the devices to the latest version to mitigate the risks associated with this vulnerability.
Other vulnerabilities in Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, MiiNePort E3
See all- CVE-2016-2295High
Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices with specified firmware versions allow remote attackers to obtain sensitive cleartext information by reading a configuration file.
- CVE-2016-2286High
Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices with specified firmware versions have a blank default password. This allows remote attackers to gain access via unspecified vectors.
Original NVD description (English source)
Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allows remote attackers to hijack the authentication of arbitrary users.