CVE-2018-18394
UnknownEPSS 0.71%
Last modified
CVE-2018-18394 is a vulnerability of currently unknown severity. Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.. EPSS estimates a 0.71% chance of exploitation in the next 30 days.
Description
Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Thingspro | 2.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-18394?
Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
How severe is CVE-2018-18394?
Severity scoring for CVE-2018-18394 is pending analysis. The EPSS model estimates a 0.71% probability of exploitation in the next 30 days.
How do I fix CVE-2018-18394?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2018
- CVE-2018-18388eScan Agent Application (MWAGENT.EXE) 4.0.2.98 in MicroWorld…
- CVE-2018-18389Due to incorrect access control in Neo4j Enterprise Database…
- CVE-2018-18390User Enumeration in Moxa ThingsPro IIoT Gateway and Device M…
- CVE-2018-18391User Privilege Escalation in Moxa ThingsPro IIoT Gateway and…
- CVE-2018-18392Privilege Escalation via Broken Access Control in Moxa Thing…
- CVE-2018-18393Password Management Issue in Moxa ThingsPro IIoT Gateway and…
- CVE-2018-18395Hidden Token Access in Moxa ThingsPro IIoT Gateway and Devic…
- CVE-2018-18396Remote Code Execution in Moxa ThingsPro IIoT Gateway and Dev…
- CVE-2018-18397The userfaultfd implementation in the Linux kernel before 4.…
- CVE-2018-18398Xfce Thunar 1.6.15, when Xfce 4.12 is used, mishandles the I…
- CVE-2018-18399SQL injection vulnerability in the "ContentPlaceHolder1_uxTi…
- CVE-2018-1840IBM WebSphere Application Server 8.5 and 9.0 could allow a r…6
Are you affected by CVE-2018-18394?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST