CVE-2017-7915
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication.
- Score
- CVSS 3.0 9.8 Critical
- Status
- Modified - ics-cert@hq.dhs.gov
- Published
- 2017-05-29
- Last modified
- 2024-08-05
- Weaknesses
- CWE-307
Affected products
- Oncell 5004-hspa Firmware (Moxa)
- Oncell 5104-hsdpa Firmware (Moxa)
- Oncell 5104-hspa Firmware (Moxa)
- Oncell G3110-hsdpa Firmware (Moxa)
- Oncell G3110-hspa Firmware (Moxa)
- Oncell G3150-hsdpa Firmware (Moxa)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01