CVE-2018-18394

Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1

published October 19, 2018

CVSS
—
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

💡 Sensitive information is stored in clear text within Moxa ThingsPro IIoT Gateway! It’s like scribbling your passwords on a sticky note and leaving it on your desk for anyone to see. 👀 Think of it as a library where all the books are left unlocked, revealing classified secrets to anyone who wanders in. Just like that library, this vulnerability allows anyone with access to read sensitive data without any effort. This could lead to a major data breach, where attackers could easily scoop up confidential information, leaving your devices and users exposed. It’s not just embarrassing; it could lead to severe reputational damage and loss of customer trust.

Put simply

Think of it as a library where all the books are left unlocked, revealing classified secrets to anyone who wanders in. Just like that library, this vulnerability allows anyone with access to read sensitive data without any effort. The vulnerability arises from sensitive data being stored in plaintext, making it easily accessible to unauthorized users. This could include credentials and other sensitive information that should be encrypted.

What to do

This could lead to a major data breach, where attackers could easily scoop up confidential information, leaving your devices and users exposed. It’s not just embarrassing; it could lead to severe reputational damage and loss of customer trust. To mitigate this risk, ensure you upgrade to a patched version of Moxa ThingsPro that encrypts sensitive data. Conduct a thorough review of stored information and implement robust access controls to safeguard against unauthorized access. You've got this! Follow these steps, and you'll secure your data in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00710 · 53.0th percentile
Published
2018-10-19T14:00Z
EPSS history
Timeline
  • 19 OCT 14:00Z
    Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1
    cvelistv5