CVE-2018-11421 - CVE House
Back to Database
Status published Critical CVE-2018-11421

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior...

Vulnerability Description

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to remote unauthenticated disclosure of sensitive information, including the administrator's password. Under certain conditions, it's also possible to retrieve additional information, such as content of HTTP requests to the device, or the previously used password, due to memory leakages.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-11421

Credits & Attribution

No credits recorded in the NVD database.

References

More from moxa

View All →
CVE-2022-27048
A vulnerability has been discovered in Moxa MGate which allows...
High 7.4
CVE-2021-46560
The firmware on Moxa TN-5900 devices through 3.1 allows command...
Critical 9.8
CVE-2021-46559
The firmware on Moxa TN-5900 devices through 3.1 has a...
High 7.5
CVE-2021-46082
Moxa TN-5900 v3.1 series routers, MGate 5109 v2.2 series protocol...
High 7.5
CVE-2021-39279
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This...
High 8.8

Affected Vendor

Affected Software

oncell g3150-hspa firmware, oncell g3150-hspa-t firmware
Vulnerable Versions:
0

Timeline

Official Publish: July 3rd, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.