CVE-2018-10692

An issue was discovered on Moxa AWK-3121 1.14 devices

published June 7, 2019

CVSS
—
EPSS
1%
Percentile
70.1
In the wild
Unconfirmed
What it is

An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01295 · 70.1th percentile
Published
2019-06-07T19:21Z
EPSS history
Timeline
  • 07 JUN 19:21Z
    An issue was discovered on Moxa AWK-3121 1.14 devices
    cvelistv5