CVSS: 10.0EPSS: 0%CPEs: 7EXPL: 0CVE-2016-5799
https://notcve.org/view.php?id=CVE-2016-5799
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack. Dispositivos Moxa OnCell G3100V2 en versiones anteriores a 2.8 y dispositivos G3111, G3151, G3211 y G3251 en versiones anteriores a 1.7 no restringen adecuadamente intentos de autenticación, lo que facilita a atacantes remotos obtener acceso a través de un ataque de fuerza bruta. • http://www.securityfocus.com/bid/92606 https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 • CWE-285: Improper Authorization •
CVSS: 3.3EPSS: 0%CPEs: 7EXPL: 0CVE-2016-5812
https://notcve.org/view.php?id=CVE-2016-5812
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file. Dispositivos Moxa OnCell G3100V2 en versiones anteriores a 2.8 y dispositivos G3111, G3151, G3211 y G3251 en versiones anteriores a 1.7 utilizan un almacenamiento de contraseñas de texto sin cifrar, lo que facilita a usuarios locales obtener información sensible leyendo un archivo de configuración. • http://www.securityfocus.com/bid/92605 https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •