CVE-2021-39278

Certain MOXA devices allow reflected XSS via the Config Import menu

published September 7, 2021

CVSS
—
EPSS
1%
Percentile
60.5
In the wild
Unconfirmed
What it is

Certain MOXA devices allow reflected XSS via the Config Import menu. This affects WAC-2004 1.7, WAC-1001 2.1, WAC-1001-T 2.1, OnCell G3470A-LTE-EU 1.7, OnCell G3470A-LTE-EU-T 1.7, TAP-323-EU-CT-T 1.3, TAP-323-US-CT-T 1.3, TAP-323-JP-CT-T 1.3, WDR-3124A-EU 2.3, WDR-3124A-EU-T 2.3, WDR-3124A-US 2.3, and WDR-3124A-US-T 2.3.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00937 · 60.5th percentile
Published
2021-09-07T05:39Z
EPSS history
Timeline
  • 07 SEP 05:39Z
    Certain MOXA devices allow reflected XSS via the Config Import menu
    cvelistv5