CVE-2018-18395

概要

参考情報

• ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-023-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-hidden-token-access · Third Party Advisory

thingspro のその他の脆弱性

• CVE-2018-18396緊急 9.8Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18394緊急 9.8Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18393緊急 9.8Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18392高 8.8Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18391高 8.8User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.