CVE-2016-5812 : Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 device

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 use cleartext password storage, which makes it easier for local users to obtain sensitive information by reading a configuration file.

Published 2016-08-24 02:00:25

Updated 2025-04-12 10:46:41

Source ICS-CERT

View at NVD, CVE.org

Products affected by CVE-2016-5812

Moxa » Oncell G3001 Firmware
Versions up to, including, (<=) 1.6
cpe:2.3:o:moxa:oncell_g3001_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Moxa » Oncell G3111 » Version: N/A
When used together with: Moxa » Oncell G3151 » Version: N/A
When used together with: Moxa » Oncell G3211 » Version: N/A
When used together with: Moxa » Oncell G3251 » Version: N/A
Moxa » Oncell G3100v2 Firmware
Versions up to, including, (<=) 2.7
cpe:2.3:o:moxa:oncell_g3100v2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Moxa » Oncell G3100v2 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2016-5812

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2016-5812

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:P/I:N/A:N	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: None Availability Impact: None
3.3	LOW	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N	1.8	1.4	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: None

CWE ids for CVE-2016-5812

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2016-5812

https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01

Moxa OnCell Vulnerabilities (Update A) | CISA
Mitigation;Third Party Advisory;US Government Resource

CVEs referencing this url
http://www.securityfocus.com/bid/92605

Moxa OnCell CVE-2016-5812 Local Information Disclosure Vulnerability

Jump to

Vulnerability Details : CVE-2016-5812

Products affected by CVE-2016-5812

Exploit prediction scoring system (EPSS) score for CVE-2016-5812

CVSS scores for CVE-2016-5812

CWE ids for CVE-2016-5812

References for CVE-2016-5812