CVE-2016-8346 Information disclosure in Moxa EDR-810 Industrial Secure Router
Attackers can access sensitive configuration and log files via a specific URL, leading to information disclosure and privilege escalation on Moxa routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-8346?
CVE-2016-8346 is a high-severity vulnerability in Moxa EDR-810 Industrial Secure Router, published on 13 Feb 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access configuration and log files (PRIVILEGE ESCALATION).
Weakness: CWE-532
Which versions are affected by CVE-2016-8346?
It affects 1 product.
Products include Moxa Edr-810 Firmware.
How do I fix CVE-2016-8346?
No fix has been published for CVE-2016-8346 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-8346 being exploited?
There is no known exploitation of CVE-2016-8346 in the wild and no public exploit code.
Other vulnerabilities in Moxa EDR-810 Industrial Secure Router
Sources
Also known as GHSA-2hg5-44f2-x8xw.