CVEvulnerability

CVE-2016-0879

7.5 HIGH Published 2016-05-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-05-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-532

Description

Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL.

Affected configurations

• moxa edr-g903 firmware (< 3.4.12)

Related

Weakness · CWE (1)

  • CWE-532 Insertion of Sensitive Information into Log File weakness

References