Vulnerability Description
Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allow remote attackers to obtain sensitive cleartext information by reading a configuration file.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Miineport E2 1242 | - |
| Moxa | Miineport E2 1242 Firmware | 1.1 |
| Moxa | Miineport E1 4641 | - |
| Moxa | Miineport E1 4641 Firmware | 1.1.10 |
| Moxa | Miineport E2 4561 | - |
| Moxa | Miineport E2 4561 Firmware | 1.1 |
| Moxa | Miineport E3 | - |
| Moxa | Miineport E3 Firmware | 1.0 |
| Moxa | Miineport E1 7080 | - |
| Moxa | Miineport E1 7080 Firmware | 1.1.10 |
Related Weaknesses (CWE)
References
- http://seclists.org/fulldisclosure/2016/May/7
- https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01Third Party AdvisoryUS Government Resource
- http://seclists.org/fulldisclosure/2016/May/7
- https://ics-cert.us-cert.gov/advisories/ICSA-16-145-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-2295?
CVE-2016-2295 is a vulnerability with a CVSS score of 7.5 (HIGH). Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort...
How severe is CVE-2016-2295?
CVE-2016-2295 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-2295?
Check the references section above for vendor advisories and patch information. Affected products include: Moxa Miineport E2 1242, Moxa Miineport E2 1242 Firmware, Moxa Miineport E1 4641, Moxa Miineport E1 4641 Firmware, Moxa Miineport E2 4561.