CVE-2017-7913

Critical

Published: 29/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA, G3110-HSDPA, G3150-HSDPA, and OnCell 5104-HSDPA, 5104-HSPA, and 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.

Risk Assessment

Storing passwords in plaintext poses a risk of exposure, which can lead to unauthorized access to systems and data. Organizations may be vulnerable to attacks that exploit these weaknesses.

Recommendation

It is recommended to update to the latest version of the software that addresses the password storage issue. Additionally, consider implementing encryption mechanisms for all passwords in configuration files.

Original NVD description (English source)

A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.