CVE-2018-11426
Last modified
CVE-2018-11426 is a vulnerability of currently unknown severity. A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change.. EPSS estimates a 1.84% chance of exploitation in the next 30 days.
Description
A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Oncell G3150-Hspa Firmware | <= 1.4 |
| Moxa | Oncell G3150-Hspa-T Firmware | <= 1.4 |
References
- https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-105.mdThird Party Advisory
- https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-105.mdThird Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-11426?
How severe is CVE-2018-11426?
How do I fix CVE-2018-11426?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-11420There is Memory corruption in the web interface of Moxa OnCe…
- CVE-2018-11421Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and…
- CVE-2018-11422Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and…
- CVE-2018-11423There is Memory corruption in the web interface Moxa OnCell …
- CVE-2018-11424There is Memory corruption in the web interface of Moxa OnCe…
- CVE-2018-11425Memory corruption issue was discovered in Moxa OnCell G3470A…
- CVE-2018-11427CSRF tokens are not used in the web application of Moxa OnCe…
- CVE-2018-11429ATLANT (ATL) is a smart contract running on Ethereum. The mi…
- CVE-2018-1143A remote unauthenticated user can execute commands as root i…
- CVE-2018-11430An issue was discovered in the Moderator Log Notes plugin 1.…
- CVE-2018-11432The mobi_parse_mobiheader function in read.c in Libmobi 0.3 …
- CVE-2018-11433The mobi_get_kf8boundary_seqnumber function in util.c in Lib…
Are you affected by CVE-2018-11426?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST