CVE-2016-2286
High
Description
Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 have a blank default password, which allows remote attackers to obtain access via unspecified vectors.
SeverityHigh
CVSS7.5
Exploit probability—
ProductMoxa Miineport E2 1242 Firmware
PublishedMay 31, 2016
First seenMay 31, 2016
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxa miineport_e2_1242_firmware | 1.1 | — |
| moxa miineport_e1_7080_firmware | 1.1.10 | — |
| moxa miineport_e2_4561_firmware | 1.1 | — |
| moxa miineport_e3_firmware | 1.0 | — |
| moxa miineport_e1_4641_firmware | 1.1.10 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.