CVE-2017-7913 in OnCell G3110
Summary
by MITRE
A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 10/03/2020
The vulnerability identified as CVE-2017-7913 represents a critical weakness in several Moxa OnCell cellular gateway models that store authentication credentials in an unencrypted format within configuration files. This issue affects multiple hardware variants including the G3110-HSPA, G3110-HSDPA, G3150-HSDPA, and various 5004 and 5104 series devices. The flaw manifests when the system's configuration files contain plaintext passwords, making these credentials immediately accessible to any attacker with file system access or those who can intercept the configuration data during transmission.
This vulnerability directly maps to CWE-312, which describes the improper handling of sensitive information by storing it in plaintext format. The technical implementation flaw occurs at the application layer where the device management software fails to implement proper cryptographic protection for authentication credentials. The configuration files are written with passwords in clear text format, eliminating any form of encryption or obfuscation that would normally protect sensitive data. This design decision creates a persistent security weakness that remains active throughout the device's operational lifecycle.
The operational impact of this vulnerability extends beyond simple credential exposure, as it provides attackers with persistent access to networked systems. An attacker who gains access to the device configuration files can immediately obtain administrative passwords, which then enable full control over the cellular gateway's operations. This includes the ability to modify network settings, configure unauthorized access points, redirect traffic, and potentially compromise the entire network infrastructure that the device serves as a gateway for. The vulnerability affects both local and remote access scenarios, as the plaintext credentials remain accessible regardless of how the configuration files are stored or transmitted.
From a threat modeling perspective, this vulnerability aligns with ATT&CK technique T1552.001, which covers the use of credentials in plaintext files. The attack surface is broad given the multiple affected device models and their widespread deployment in industrial and enterprise environments. Organizations utilizing these devices face significant risk of unauthorized access, particularly in scenarios where physical security is inadequate or network segmentation is insufficient. The vulnerability is particularly concerning in environments where these devices are deployed without proper security controls, as they may be located in accessible areas where unauthorized individuals could potentially gain physical access to the devices.
Mitigation strategies should focus on immediate remediation through firmware updates provided by Moxa, which would address the plaintext storage issue by implementing proper encryption for sensitive data. Organizations should also implement network segmentation to limit access to these devices, enforce strict physical security controls, and regularly audit device configurations. Additionally, implementing monitoring solutions to detect unauthorized access attempts and maintaining detailed access logs can help identify potential exploitation attempts. The long-term solution requires device administrators to adopt security best practices such as using encrypted configuration management, implementing role-based access controls, and ensuring that all sensitive data is protected through appropriate cryptographic measures.