CVE-2016-9356 Privilege escalation in Moxa DACenter 1.4 and older
An unquoted search path vulnerability in Moxa DACenter allows local attackers to execute arbitrary code with elevated privileges.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-9356?
CVE-2016-9356 is a high-severity vulnerability in Moxa DACenter 1.4 and older, published on 13 Feb 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
An issue was discovered in Moxa DACenter Versions 1.4 and older. The application may suffer from an unquoted search path issue.
Weakness: CWE-284
Which versions are affected by CVE-2016-9356?
It affects 1 product.
Products include Moxa Dacenter.
How do I fix CVE-2016-9356?
No fix has been published for CVE-2016-9356 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-9356 being exploited?
There is no known exploitation of CVE-2016-9356 in the wild and no public exploit code.
Other vulnerabilities in Moxa DACenter 1.4 and older
Sources
Also known as GHSA-fjg7-wjc5-q2pf.