Moxa OnCell Central Manager Vulnerabilities
view advisory published 2015-08-27
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-6481US | high8.3OT elevated | — | ||
The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative ac… | ||||
| CVE-2015-6480US | high8.3 | — | ||
The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a comm… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-15-328-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-328-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationOnCell Central Manager Software
Update to the latest version. (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6 - MitigationOnCell Central Manager Software
Update to the latest version. (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan