Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr42-2w3r-mq8c

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials.

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials.

EPSS

Процентиль: 50%
0.00264
Низкий

8.1 High

CVSS3

Дефекты

CWE-311

Связанные уязвимости

CVSS3: 8.1
nvd
больше 6 лет назад

An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an attacker to sniff the traffic easily and allows an attacker to compromise sensitive data such as credentials.

EPSS

Процентиль: 50%
0.00264
Низкий

8.1 High

CVSS3

Дефекты

CWE-311