Oncell G3110 Hspa Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:moxa:oncell_g3110-hspa_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Oncell G3110 Hspa Firmware (04a2e184-dd7e-59fd-b574-4fe1de28b83b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-5455 |
vulnerable | 2026-06-08 05:11:51.068883 |
Details available
A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.372Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5453 |
vulnerable | 2026-06-08 05:11:51.064075 |
Details available
An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.390Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5449 |
vulnerable | 2026-06-08 05:11:51.057232 |
Details available
A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.399Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7917 |
vulnerable | 2026-06-08 05:10:06.394589 |
Details available
A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.
Published: 2017-05-29T16:00:00.000Z
Updated: 2024-08-05T16:19:29.287Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7915 |
vulnerable | 2026-06-08 05:10:06.388746 |
Details available
An Improper Restriction of Excessive Authentication Attempts issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. An attacker can freely use brute force to determine parameters needed to bypass authentication.
Published: 2017-05-29T16:00:00.000Z
Updated: 2024-08-05T16:19:29.342Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7913 |
vulnerable | 2026-06-08 05:10:06.369919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.