CVE-2016-5819

MEDIUM

Moxa OnCell G3100V2 < 2.8 and G3111/G3151/G3211/G3251 < 1.7 - Reflected Cross-Site Scripting

Title source: llm

Description

Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01

Scores

CVSS v3 6.1

EPSS 0.0019

EPSS Percentile 39.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE

CWE-79

Status published

Products (5)

moxa/oncell_g3100v2_firmware < 2.8

moxa/oncell_g3111_firmware < 1.7

moxa/oncell_g3151_firmware < 1.7

moxa/oncell_g3211_firmware < 1.7

moxa/oncell_g3251_firmware < 1.7

Published Mar 21, 2019

Tracked Since Feb 18, 2026