Moxa OnCell Central Manager Vulnerabilities
Advisory ansehen veröffentlicht 2015-08-27
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2015-6481US | high8.3OT erhöht | — | ||
The login function in the RequestController class in Moxa OnCell Central Manager before 2.2 has a hardcoded root password, which allows remote attackers to obtain administrative ac… | ||||
| CVE-2015-6480US | high8.3 | — | ||
The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a comm… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-15-328-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-15-328-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationOnCell Central Manager Software
Update to the latest version. (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6 - MitigationOnCell Central Manager Software
Update to the latest version. (http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6)
http://www.moxa.com/support/sarch_result.aspx?type=soft&prod_id=3116&type_id=6
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan