CVEvulnerability
CVE-2016-5799
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-08-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-285
Description
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.
Affected configurations
• moxa oncell g3001 firmware (<= 1.6)
• moxa oncell g3100v2 firmware (<= 2.7)
Related
Weakness · CWE (1)
- CWE-285 Improper Authorization weakness
References
- http://www.securityfocus.com/bid/92606 www.securityfocus.com
- https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/92606 www.securityfocus.com
- https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 Mitigation, Third Party Advisory, US Government Resource