CVE-2023-6093 OnCell G3150A-LTE Series: Clickjacking Vulnerability
Attackers can trick users into interacting with the OnCell G3150A-LTE interface via clickjacking, potentially bypassing security controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2023-6093?
CVE-2023-6093 is a medium-severity vulnerability in Moxa OnCell G3150A-LTE Series, published on 31 Dec 2023. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A clickjacking vulnerability has been identified in OnCell G3150A-LTE Series firmware versions v1.3 and prior. This vulnerability is caused by incorrectly restricts frame objects, which can lead to user confusion about which interface the user is interacting with. This vulnerability may lead the attacker to trick the user into interacting with the application.
Weakness: CWE-1021
Which versions are affected by CVE-2023-6093?
It affects 1 product.
Products include Moxa Oncell G3150a-Lte Firmware.
How do I fix CVE-2023-6093?
No fix has been published for CVE-2023-6093 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-6093 being exploited?
There is no known exploitation of CVE-2023-6093 in the wild and no public exploit code.
Other vulnerabilities in Moxa OnCell G3150A-LTE Series
Sources
Also known as GHSA-rj6w-4jrj-f27j.