CVE-2016-2286

HIGH

Moxa Miineport E2 1242 Firmware - Authentication Bypass

Title source: rule

Description

Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614, MiiNePort_E2_4561 devices with firmware 1.1 Build 10080614, and MiiNePort E3 devices with firmware 1.0 Build 11071409 have a blank default password, which allows remote attackers to obtain access via unspecified vectors.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0077
EPSS Percentile 73.2%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-287
Status draft

Affected Products (5)

moxa/miineport_e2_1242_firmware
moxa/miineport_e1_7080_firmware
moxa/miineport_e2_4561_firmware
moxa/miineport_e3_firmware
moxa/miineport_e1_4641_firmware

Timeline

Published May 31, 2016
Tracked Since Feb 18, 2026