Approved changes feed: RSS · Atom

cpe:2.3:h:moxa:oncell_g3150-hspa-t:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3150 Hspa T (e8a7ed6a-16b8-58a3-8d18-f9b70f40ed14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5455 not_vulnerable 2026-06-08 05:11:51.069016 Details available
A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5453 not_vulnerable 2026-06-08 05:11:51.064216 Details available
An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5449 not_vulnerable 2026-06-08 05:11:51.052981 Details available
A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11427 not_vulnerable 2026-06-08 05:10:38.454348 Details available
CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator.
Published: 2019-07-03T14:46:54.000Z
Updated: 2024-08-05T08:10:14.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11426 not_vulnerable 2026-06-08 05:10:38.453965 Details available
A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change.
Published: 2019-07-03T14:50:10.000Z
Updated: 2024-08-05T08:10:14.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11423 not_vulnerable 2026-06-08 05:10:38.445722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11422 not_vulnerable 2026-06-08 05:10:38.445364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11421 not_vulnerable 2026-06-08 05:10:38.444969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11420 not_vulnerable 2026-06-08 05:10:38.444487 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.