CVE-2016-8362
mediumpriority · track · 26EPSS 0.013 · 71 %ileEUUSEPSS · scored 2026-10-28
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. Any user is able to download log files by accessing a specific URL.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationOnCell AWK-1121/1127 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-1131A/3131A/4131A Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3121-M12-RTG Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3121/4121 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3131-M12-RCC Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3131/4131 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3191 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-5222/6222 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-5232-M12-RCC Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-5232/6232 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell G3470A-LTEcisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell TAP-6226 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell WAC-1001 V2 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationWAC-2004 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (43)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-16-308-01Moxa OnCell Security Vulnerabilities2016-08-07icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- http://www.moxa.com/Patchcnnvd
- http://www.securityfocus.com/bid/94092cnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01cnnvd
- http://www.securityfocus.com/bid/94092enisa_euvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01enisa_euvd
- http://www.securityfocus.com/bid/94092Third Party AdvisoryVDB Entrynvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan