CVE-2018-11426
Summary
| CVE | CVE-2018-11426 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-07-03 15:15:00 UTC |
| Updated | 2019-07-10 14:33:00 UTC |
| Description | A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change. |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Moxa | Oncell G3150-hspa | - | All | All | All |
| Hardware | Moxa | Oncell G3150-hspa | - | All | All | All |
| Hardware | Moxa | Oncell G3150-hspa-t | - | All | All | All |
| Hardware | Moxa | Oncell G3150-hspa-t | - | All | All | All |
| Operating System | Moxa | Oncell G3150-hspa-t Firmware | All | All | All | All |
| Operating System | Moxa | Oncell G3150-hspa Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Advisories/KL-MOXA-2018-105.md at master · klsecservices/Advisories · GitHub | MISC | github.com | Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.