CVE-2023-6094

A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:moxa:oncell_g3150a-lte_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_g3150a-lte:-:*:*:*:*:*:*:*

History

09 Jan 2024, 14:55

Type Values Removed Values Added
CPE cpe:2.3:o:moxa:oncell_g3150a-lte_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_g3150a-lte:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.3
CWE CWE-319
First Time Moxa oncell G3150a-lte Firmware
Moxa
Moxa oncell G3150a-lte
References () https://www.moxa.com/en/support/product-support/security-advisory/oncell-g3150a-lte-series-multiple-web-application-vulnerabilities-and-security-enhancement - () https://www.moxa.com/en/support/product-support/security-advisory/oncell-g3150a-lte-series-multiple-web-application-vulnerabilities-and-security-enhancement - Vendor Advisory

04 Jan 2024, 15:15

Type Values Removed Values Added
Summary A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from a lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target. A vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. The vulnerability results from lack of protection for sensitive information during transmission. An attacker eavesdropping on the traffic between the web browser and server may obtain sensitive information. This type of attack could be executed to gather sensitive information or to facilitate a subsequent attack against the target.

31 Dec 2023, 10:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-31 10:15

Updated : 2024-02-28 20:54


NVD link : CVE-2023-6094

Mitre link : CVE-2023-6094

CVE.ORG link : CVE-2023-6094


JSON object : View

Products Affected

moxa

  • oncell_g3150a-lte
  • oncell_g3150a-lte_firmware
CWE
CWE-319

Cleartext Transmission of Sensitive Information