CVE-2016-5819: XSS
First published: Thu Mar 21 2019(Updated: )
Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa Oncell G3100v2 Firmware | <2.8 | |
| Moxa Oncell G3100v2 Firmware | ||
| Moxa Oncell G3111 | <1.7 | |
| Moxa OnCell Gateway G3111 | ||
| Moxa Oncell G3151 | <1.7 | |
| Moxa Oncell Gateway Firmware | ||
| Moxa Oncell G3211 Firmware | <1.7 | |
| Moxa Oncell Gateway Firmware | ||
| Moxa Oncell G3251 Firmware | <1.7 | |
| Moxa Oncell G3251 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-5819?
CVE-2016-5819 has been classified as a medium severity vulnerability due to its potential impact on users' web browsers through reflected cross-site scripting.
How do I fix CVE-2016-5819?
To fix CVE-2016-5819, update your Moxa G3100V2 Series firmware to version 2.8 or higher, and for the OnCell G3111, G3151, G3211, and G3251 Series, upgrade to version 1.7 or above.
Who is affected by CVE-2016-5819?
CVE-2016-5819 affects users running Moxa G3100V2 Series firmware editions prior to version 2.8 and OnCell G3111, G3151, G3211, G3251 Series firmware editions prior to version 1.7.
What type of attack does CVE-2016-5819 allow?
CVE-2016-5819 allows a reflected cross-site scripting attack, which can enable attackers to execute arbitrary script code in the user's browser.
What are the potential impacts of CVE-2016-5819?
The potential impacts of CVE-2016-5819 include unauthorized actions being executed in the context of a user’s session, compromising the integrity and confidentiality of user sessions.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/moxa
- canonical/moxa oncell g3100v2 firmware
- canonical/moxa oncell g3111
- canonical/moxa oncell gateway g3111
- canonical/moxa oncell g3151
- canonical/moxa oncell gateway firmware
- canonical/moxa oncell g3211 firmware
- canonical/moxa oncell g3251 firmware