1. Home
  2. CVE Database
  3. CVE-2018-5453
HIGH · 7.5

CVE-2018-5453

An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTT...

Vulnerability Description

An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
MoxaOncell G3110-Hspa Firmware<= 1.4
MoxaOncell G3110-Hspa-
MoxaOncell G3110-Hspa-T Firmware<= 1.4
MoxaOncell G3110-Hspa-T-
MoxaOncell G3150-Hspa Firmware<= 1.4
MoxaOncell G3150-Hspa-
MoxaOncell G3150-Hspa-T Firmware<= 1.4
MoxaOncell G3150-Hspa-T-

Related Weaknesses (CWE)

CWE-119CWE-130

References

FAQ

What is CVE-2018-5453?

CVE-2018-5453 is a vulnerability with a CVSS score of 7.5 (HIGH). An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTT...

How severe is CVE-2018-5453?

CVE-2018-5453 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-5453?

Check the references section above for vendor advisories and patch information. Affected products include: Moxa Oncell G3110-Hspa Firmware, Moxa Oncell G3110-Hspa, Moxa Oncell G3110-Hspa-T Firmware, Moxa Oncell G3110-Hspa-T, Moxa Oncell G3150-Hspa Firmware.