Vulnerability Description
Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Oncell G3100V2 Firmware | < 2.8 |
| Moxa | Oncell G3100V2 | - |
| Moxa | Oncell G3111 Firmware | < 1.7 |
| Moxa | Oncell G3111 | - |
| Moxa | Oncell G3151 Firmware | < 1.7 |
| Moxa | Oncell G3151 | - |
| Moxa | Oncell G3211 Firmware | < 1.7 |
| Moxa | Oncell G3211 | - |
| Moxa | Oncell G3251 Firmware | < 1.7 |
| Moxa | Oncell G3251 | - |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01Third Party AdvisoryUS Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2016-5819?
CVE-2016-5819 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker ...
How severe is CVE-2016-5819?
CVE-2016-5819 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-5819?
Check the references section above for vendor advisories and patch information. Affected products include: Moxa Oncell G3100V2 Firmware, Moxa Oncell G3100V2, Moxa Oncell G3111 Firmware, Moxa Oncell G3111, Moxa Oncell G3151 Firmware.