Vulnerability Description
Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allows remote attackers to hijack the authentication of arbitrary users.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Miineport E2 1242 | - |
| Moxa | Miineport E2 1242 Firmware | 1.1 |
| Moxa | Miineport E2 4561 | - |
| Moxa | Miineport E2 4561 Firmware | 1.1 |
| Moxa | Miineport E1 7080 | - |
| Moxa | Miineport E1 7080 Firmware | 1.1.10 |
| Moxa | Miineport E3 | - |
| Moxa | Miineport E3 Firmware | 1.0 |
| Moxa | Miineport E1 4641 | - |
| Moxa | Miineport E1 4641 Firmware | 1.1.10 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2016/May/7
- https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01Third Party AdvisoryUS Government Resource
- http://seclists.org/fulldisclosure/2016/May/7
- https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-2285?
CVE-2016-2285 is a vulnerability with a CVSS score of 8.8 (HIGH). Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 ...
How severe is CVE-2016-2285?
CVE-2016-2285 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2285?
Check the references section above for vendor advisories and patch information. Affected products include: Moxa Miineport E2 1242, Moxa Miineport E2 1242 Firmware, Moxa Miineport E2 4561, Moxa Miineport E2 4561 Firmware, Moxa Miineport E1 7080.