CVE-2018-11421

Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and…

published July 3, 2019

CVSS
—
EPSS
1%
Percentile
59.5
In the wild
Unconfirmed
What it is

⚠️ An unguarded conversation is happening! The Moxa OnCell G3100-HSPA Series sends data in plain text, just like shouting sensitive information across a crowded room. 🔒 It's like having a hotel reception where every guest can hear your private conversations—there's no soundproofing, and any eavesdropper can easily catch your passwords and personal info. 🏨 This vulnerability allows attackers to intercept sensitive information like administrator passwords and potentially modify device configurations. Imagine an intruder not only overhearing your password but also making unauthorized changes to your device settings—absolutely devastating!

Put simply

It's like having a hotel reception where every guest can hear your private conversations—there's no soundproofing, and any eavesdropper can easily catch your passwords and personal info. 🏨 The Moxa OnCell G3100-HSPA Series uses a proprietary monitoring protocol that lacks essential security controls, enabling an unauthenticated disclosure of sensitive information due to unencrypted communication and memory leakages.

What to do

This vulnerability allows attackers to intercept sensitive information like administrator passwords and potentially modify device configurations. Imagine an intruder not only overhearing your password but also making unauthorized changes to your device settings—absolutely devastating! To protect against this vulnerability, upgrade to the latest firmware version if available, and implement secure protocols like SSL/TLS to encrypt your communications. Additionally, regularly audit your device settings and monitor for any unauthorized changes. You've got this! By taking these steps, you’re on your way to securing your devices and protecting your data. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00906 · 59.5th percentile
Published
2019-07-03T15:24Z
EPSS history
Timeline
  • 03 JUL 15:24Z
    Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and…
    cvelistv5