CVE-2016-2295
HighSummary
Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices with specified firmware versions allow remote attackers to obtain sensitive cleartext information by reading a configuration file.
Risk Assessment
Attackers may gain access to confidential data, potentially leading to further attacks on the organization's infrastructure.
Recommendation
It is recommended to update the device firmware to the latest version to minimize the risk of information leakage.
Other vulnerabilities in Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, MiiNePort E3
See all- CVE-2016-2286High
Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices with specified firmware versions have a blank default password. This allows remote attackers to gain access via unspecified vectors.
- CVE-2016-2285High
There is a cross-site request forgery (CSRF) vulnerability in Moxa MiiNePort_E1_4641, MiiNePort_E1_7080, MiiNePort_E2_1242, MiiNePort_E2_4561, and MiiNePort E3 devices. This allows remote attackers to hijack the authentication of arbitrary users.
Original NVD description (English source)
Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allow remote attackers to obtain sensitive cleartext information by reading a configuration file.