CVE Catalog

CVE-2016-4503

Critical
Published: Translated: NVD NIST

Summary

The Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, enabling them to modify settings and data by reading a cookie parameter containing a UserId value.

Risk Assessment

Bypassing authentication can lead to unauthorized changes in device configuration, posing a significant security risk to the system.

Recommendation

It is recommended to update the software to the latest version and implement additional security measures to prevent unauthorized access.

Original NVD description (English source)

Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS