CVE-2016-8363
highpriority · track · 41EPSS 0.024 · 84 %ileEUUSEPSS · scored 2026-10-28
An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
No vendor fix yet; a mitigation is available.
- MitigationOnCell AWK-1121/1127 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-1131A/3131A/4131A Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3121-M12-RTG Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3121/4121 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3131-M12-RCC Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3131/4131 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-3191 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-5222/6222 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-5232-M12-RCC Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell AWK-5232/6232 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell G3470A-LTEcisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell TAP-6226 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationOnCell WAC-1001 V2 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
- MitigationWAC-2004 Seriescisa_csaf_ot
Moxa recommends that users disable HTTP/HTTPS after completing required configuration through web browser interface. Users can access via SNMP to enable HTTP/HTTPS if needed. If remote control or monitoring is required, users should enable “IP Protocol Filter” feature of OnCell/AWK products to prevent any unauthorized access to the administrative web management interface.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–10
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (43)
Products and version ranges known to be affected.
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSA-16-308-01Moxa OnCell Security Vulnerabilities2016-08-07icsa · cisa_csaf_otUS
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (7)
External citations — patches, advisories, analysis.
- http://www.moxa.com/Patchcnnvd
- http://www.securityfocus.com/bid/94092cnnvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01cnnvd
- http://www.securityfocus.com/bid/94092enisa_euvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01enisa_euvd
- http://www.securityfocus.com/bid/94092Third Party AdvisoryVDB Entrynvd
- https://ics-cert.us-cert.gov/advisories/ICSA-16-308-01Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan