CVE-2018-5453

An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable.

Score

CVSS 3.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-03-05

Last modified

2024-08-05

Weaknesses

CWE-119, CWE-130

Affected products

• Oncell G3110-hspa-t Firmware (Moxa)
• Oncell G3110-hspa Firmware (Moxa)
• Oncell G3150-hspa-t Firmware (Moxa)
• Oncell G3150-hspa Firmware (Moxa)

References

• https://ics-cert.us-cert.gov/advisories/ICSA-18-060-02