CVE-2018-11426: Critical severity moxa oncell g3150-hsdpa firmware vulnerability
A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11426?
The severity of CVE-2018-11426 is considered to be high due to the potential for unauthorized access to the web interface.
How do I fix CVE-2018-11426?
To fix CVE-2018-11426, update the firmware of the Moxa OnCell G3100-HSPA Series to a version later than 1.4 Build 16062919.
What systems are affected by CVE-2018-11426?
CVE-2018-11426 affects Moxa OnCell G3100-HSPA Series firmware version 1.4 Build 16062919 and earlier.
Can CVE-2018-11426 be exploited remotely?
Yes, CVE-2018-11426 can be exploited remotely as an attacker can brute force cookie parameters to bypass authentication.
What functionality remains accessible after an attacker exploits CVE-2018-11426?
After exploiting CVE-2018-11426, the attacker can access all functions of the web interface except for changing the password.