Moxa MXview
view advisory published 2018-04-05
Successful exploitation of this vulnerability could allow a remote attacker to access and read cryptographic private keys.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7506US | high7.5 | — | ||
The private key of the web server in Moxa MXview versions 2.8 and prior is able to be read and accessed via an HTTP GET request, which may allow a remote attacker to decrypt encryp… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedMXview
Moxa has developed a new version of MXview to mitigate the vulnerability. MXview versions 2.9 can be downloaded from the Moxa Support Website.
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.moxa.com_support_sarch-5Fresult.aspx-3Fprod-5Fid-3D622-26type-5Fid-3D6-26type-3Dsoft&d=DwMGaQ&c=54IZrppPQZKX9mLzcGdPfFD1hxrcB__aEkJFOKJFd00&r=zE5lG3CZZIbdBvT6slVAzQ&m=uzCYqjtELYZEpwNWB_Js3VrDXu8vrk5D_I3XqMmoxHo&s=3rdom5A4QUvQGYDHgpuOn_VeaL1JLO9NysDR7hA8tyo&e
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan