CVE-2017-7913
Critical
Description
A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.
SeverityCritical
CVSS9.8
Exploit probability—
ProductMoxa Oncell G3110-hspa Firmware
PublishedMay 29, 2017
First seenMay 29, 2017
Weakness typeCWE-256CWE-256
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| moxa oncell_g3110-hspa_firmware | v ≤ 1.3 | — |
| moxa oncell_g3110-hsdpa_firmware | v ≤ 1.2 | — |
| moxa oncell_g3150-hsdpa_firmware | v ≤ 1.4 | — |
| moxa oncell_5104-hsdpa_firmware | v ≤ - | — |
| moxa oncell_5104-hspa_firmware | v ≤ - | — |
| moxa oncell_5004-hspa_firmware | v ≤ - | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.