CVE-2018-18396

概要

参考情報

• ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-024-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-remote-code-execution · Third Party Advisory

thingspro のその他の脆弱性

• CVE-2018-18395緊急 9.8Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18394緊急 9.8Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18393緊急 9.8Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18392高 8.8Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18391高 8.8User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.