CVE-2016-4514 — HIGH (7.7) — White Hats Nepal

Vulnerability Description

Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy.

CVSS Score

7.7

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Moxa	Pt-7728	-
Moxa	Pt-7728 Firmware	3.4

Related Weaknesses (CWE)

CWE-863

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-168-01Third Party AdvisoryUS Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-16-168-01Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2016-4514?

CVE-2016-4514 is a vulnerability with a CVSS score of 7.7 (HIGH). Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy.

How severe is CVE-2016-4514?

CVE-2016-4514 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-4514?

Check the references section above for vendor advisories and patch information. Affected products include: Moxa Pt-7728, Moxa Pt-7728 Firmware.