Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2018-19660

An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/webSettingProfileSecurity can result in running OS commands as the root user.

CVSS 3.0 · 8.8 High EPSS 28.8% KEV · Not listed
Vendors
Moxa
Products
Nport W2x50a Nport W2x50a Firmware
CVE-2018-19659

An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP POST request to /goform/net_WebPingGetValue can result in running OS commands as the root user. This is similar to CVE-2017-12120.

CVSS 3.0 · 8.8 High EPSS 4.1% KEV · Not listed
Vendors
Moxa
Products
Nport W2x50a Nport W2x50a Firmware