CVE Feed

    Dashboard / CVE / CVE-2018-5455

    CVE-2018-5455

    A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.

    Published:Mar 5, 2018
    Last Modified:Nov 21, 2024
    EPS:Mar 5, 2018
    EPSS Score:0.00471
    CVSS Score:9.8

    Affected Products

    Vendor
    Moxa
    Product
    Oncell G3110-hspa
    Vendor
    Moxa
    Product
    Oncell G3110-hspa-t
    Vendor
    Moxa
    Product
    Oncell G3110-hspa-t Firmware
    Vendor
    Moxa
    Product
    Oncell G3110-hspa Firmware
    Vendor
    Moxa
    Product
    Oncell G3150-hspa
    Vendor
    Moxa
    Product
    Oncell G3150-hspa-t
    Vendor
    Moxa
    Product
    Oncell G3150-hspa-t Firmware
    Vendor
    Moxa
    Product
    Oncell G3150-hspa Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High