Vulnerability Details CVE-2016-2285
Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 allows remote attackers to hijack the authentication of arbitrary users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 42.2%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.8
References
Products affected by CVE-2016-2285
-
cpe:2.3:h:moxa:miineport_e1_4641:-
-
cpe:2.3:h:moxa:miineport_e1_7080:-
-
cpe:2.3:h:moxa:miineport_e2_1242:-
-
cpe:2.3:h:moxa:miineport_e2_4561:-
-
cpe:2.3:h:moxa:miineport_e3:-
-
cpe:2.3:o:moxa:miineport_e1_4641_firmware:1.1.10
-
cpe:2.3:o:moxa:miineport_e1_7080_firmware:1.1.10
-
cpe:2.3:o:moxa:miineport_e2_1242_firmware:1.1
-
cpe:2.3:o:moxa:miineport_e2_4561_firmware:1.1
-
cpe:2.3:o:moxa:miineport_e3_firmware:1.0