CVE-2018-16282: OS Command Injection

Published Sep 20, 2018

Updated

A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/netWebCADELETEGetValue URI.

Affected Software

2 affected components

MOXA Edr-810 Firmware=4.2

MOXA EDR-810

Event History

Sep 20, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2018-16282?

CVE-2018-16282 is classified as a high severity vulnerability due to the possibility of remote command execution with root privileges.

How do I fix CVE-2018-16282?

To mitigate CVE-2018-16282, upgrade the Moxa EDR-810 firmware to the latest version that addresses this command injection vulnerability.

Who is affected by CVE-2018-16282?

CVE-2018-16282 affects users of Moxa EDR-810 devices running firmware version 4.2.

What type of vulnerability is CVE-2018-16282?

CVE-2018-16282 is characterized as a command injection vulnerability allowing remote attackers to execute arbitrary commands.

What can attackers do with CVE-2018-16282?

With CVE-2018-16282, attackers can execute arbitrary OS commands on the Moxa EDR-810 device with root privileges, potentially compromising the system.