CVE-2017-7913 Information disclosure in Moxa OnCell
Attackers can read plaintext passwords from configuration files in Moxa OnCell devices, potentially leading to unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-7913?
CVE-2017-7913 is a critical vulnerability in Moxa OnCell, published on 29 May 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.
Which versions are affected by CVE-2017-7913?
It affects 6 products.
Products include Moxa Oncell 5004-Hspa Firmware, Moxa Oncell 5104-Hsdpa Firmware, Moxa Oncell 5104-Hspa Firmware, Moxa Oncell G3110-Hsdpa Firmware, Moxa Oncell G3110-Hspa Firmware, Moxa Oncell G3150-Hsdpa Firmware.
How do I fix CVE-2017-7913?
No fix has been published for CVE-2017-7913 yet. Limit exposure of the affected software until one is available.
Is CVE-2017-7913 being exploited?
There is no known exploitation of CVE-2017-7913 in the wild and no public exploit code.
Other vulnerabilities in Moxa OnCell
Sources
Also known as GHSA-5q29-f827-q5cx.