CVE-2018-5455 | BDVDB-2026-97397 Detail

Moxa OnCell G3100-HSPA Series

Description#

A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-565

References#

https://ics-cert.us-cert.gov/advisories/ICSA-18-060-02

Exploit#

No public exploit known

History#

Version 12018-03-05Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.