CVE-2016-5799

Critical

Description

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

SeverityCritical
CVSS9.8
Exploit probability—
ProductMoxa Oncell G3001 Firmware
PublishedAug 24, 2016
First seenAug 24, 2016

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
moxa oncell_g3001_firmwarev ≤ 1.6—
moxa oncell_g3100v2_firmwarev ≤ 2.7—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2016-5799 · Moxa Oncell G3001 Firmware · Dark Radar