Low severity · published Aug 24, 2016
CVE-2016-5812
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain…
3.3
CVSS
0.3%
EPSS
No
On KEV
Description
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 23% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OG
Oncell G3001 Firmware · Moxa
through 1.6 · source: NVD
OG
Oncell G3100v2 Firmware · Moxa
through 2.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5812
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5812
www.securityfocus.com
http://www.securityfocus.com/bid/92605
Mitigation
https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01
More from Oncell G3001 Firmware
9.8
CVE-2016-5799
Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote…