CVE-2016-5812

Опубликовано: 24 авг. 2016

Источник: nvd

CVSS3: 3.3

CVSS2: 2.1

EPSS Низкий

Описание

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file.

Ссылки

http://www.securityfocus.com/bid/92605
https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01
Mitigation
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/92605
https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:moxa:oncell_g3001_firmware:*:*:*:*:*:*:*:*

Версия до 1.6 (включая)

Одно из

cpe:2.3:h:moxa:oncell_g3111:-:*:*:*:*:*:*:*

cpe:2.3:h:moxa:oncell_g3151:-:*:*:*:*:*:*:*

cpe:2.3:h:moxa:oncell_g3211:-:*:*:*:*:*:*:*

cpe:2.3:h:moxa:oncell_g3251:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:moxa:oncell_g3100v2_firmware:*:*:*:*:*:*:*:*

Версия до 2.7 (включая)

cpe:2.3:h:moxa:oncell_g3100v2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00047

Низкий

3.3 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-j549-w2g8-v63q