CVE-2016-9344
First published: Mon Feb 13 2017(Updated: )
An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. An attacker may be able to brute force an active session cookie to be able to download configuration files.
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa Miineport E1 Firmware | <=1.7 | |
| Moxa Miineport E2 Firmware | <=1.3 | |
| Moxa Miineport E3 Firmware | <=1.0 | |
| Moxa MiiNePort E1 | ||
| Moxa Miineport E2 | ||
| Moxa Miineport E3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/tags
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/moxa
- canonical/moxa miineport e1 firmware
- version/moxa miineport e1 firmware/1.7
- canonical/moxa miineport e2 firmware
- version/moxa miineport e2 firmware/1.3
- canonical/moxa miineport e3 firmware
- version/moxa miineport e3 firmware/1.0
- canonical/moxa miineport e1
- canonical/moxa miineport e2
- canonical/moxa miineport e3