CVE-2016-2286
HighSummary
Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices with specified firmware versions have a blank default password. This allows remote attackers to gain access via unspecified vectors.
Risk Assessment
The lack of a default password poses a serious security risk, allowing unauthorized access to devices, which may lead to system and data compromise.
Recommendation
It is recommended to immediately change the default password to a strong password and implement additional security measures to minimize the risk of unauthorized access.
Other vulnerabilities in Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, MiiNePort E3
See all- CVE-2016-2295High
Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices with specified firmware versions allow remote attackers to obtain sensitive cleartext information by reading a configuration file.
- CVE-2016-2285High
There is a cross-site request forgery (CSRF) vulnerability in Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices. This allows remote attackers to hijack the authentication of arbitrary users.
Original NVD description (English source)
Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 have a blank default password, which allows remote attackers to obtain access via unspecified vectors.