Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2024-6786

MXview One Series vulnerable to Path Traversal

The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxview One
CVE-2024-6787

MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition

This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU). By exploiting this race condition, an attacker can write arbitrary files to the system. This could allow the attacker to execute malicious code and potentially cause file losses.

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxview One
CVE-2024-6785

MXview One and MXview One Central Manager Series store cleartext credentials in a local file

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Moxa
Products
Mxview One Mxview One Central Manager