CVEvulnerability

CVE-2016-8362

6.5 MEDIUM Published 2017-02-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-02-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.5 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-287

Description

An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. Any user is able to download log files by accessing a specific URL.

Affected configurations

• moxa oncellg3470a-lte firmware (<= 10-31-2016) • moxa awk-4131a firmware (<= 10-31-2016) • moxa awk-3191 firmware (<= 05-30-2017) • moxa awk-5232 firmware (<= 05-30-2017) • moxa awk-6232 firmware (<= 05-30-2017) • moxa awk-1121 firmware (<= 06-29-2017) • moxa awk-1127 firmware (<= 06-29-2017) • moxa wac-1001 v2 firmware (<= 06-29-2017) • moxa wac-2004 firmware (<= 06-29-2017) • moxa awk-3121-m12-rtg firmware (<= 06-29-2017) • moxa awk-3131-m12-rcc firmware (<= 06-29-2017) • moxa awk-5232-m12-rcc firmware (<= 06-29-2017) • moxa awk-3131a firmware (<= 10-31-2016) • moxa awk-1131a firmware (<= 10-31-2016)

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References