Moxa OnCell G3100-HSPA up to 1.6 Build 17100315 Monitoring Protocol HTTP information disclosure

Summaryinfo

A vulnerability was found in Moxa OnCell G3100-HSPA up to 1.6 Build 17100315 and classified as critical. This affects an unknown part of the component Monitoring Protocol. Executing a manipulation can lead to information disclosure (HTTP). This vulnerability is registered as CVE-2018-11421. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability classified as critical was found in Moxa OnCell G3100-HSPA up to 1.6 Build 17100315 (Automation Software). This vulnerability affects an unknown code of the component Monitoring Protocol. The manipulation with an unknown input leads to a information disclosure vulnerability (HTTP). The CWE definition for the vulnerability is CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to remote unauthenticated disclosure of sensitive information, including the administrator's password. Under certain conditions, it's also possible to retrieve additional information, such as content of HTTP requests to the device, or the previously used password, due to memory leakages.

The weakness was published 07/03/2019. This vulnerability was named CVE-2018-11421 since 05/24/2018. The exploitation appears to be difficult. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Similar entries are available at VDB-137262, VDB-137261 and VDB-137259. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Automation Software

Vendor

• Moxa

Name

• OnCell G3100-HSPA

Version

• 1.6 Build 17100315

License

• commercial

Website

• Vendor: https://www.moxa.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion