A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.
References
Link | Resource |
---|---|
https://ics-cert.us-cert.gov/advisories/ICSA-18-060-02 | Patch Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
Configuration 4 (hide)
AND |
|
History
No history.
Information
Published : 2018-03-05 17:29
Updated : 2024-02-28 16:25
NVD link : CVE-2018-5455
Mitre link : CVE-2018-5455
CVE.ORG link : CVE-2018-5455
JSON object : View
Products Affected
moxa
- oncell_g3150-hspa_firmware
- oncell_g3110-hspa
- oncell_g3110-hspa_firmware
- oncell_g3150-hspa
- oncell_g3150-hspa-t_firmware
- oncell_g3110-hspa-t_firmware
- oncell_g3110-hspa-t
- oncell_g3150-hspa-t