Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:oncell_g3150-hspa-t_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorMoxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f)
ProductOncell G3150 Hspa T Firmware (b060ae5b-a415-5c48-a8ba-21a9c9dfe825)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-5455 vulnerable 2026-06-08 05:11:51.068998 Details available
A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter to consist of only digits, allowing an attacker to perform a brute force attack bypassing authentication and gaining access to device functions.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.372Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5453 vulnerable 2026-06-08 05:11:51.064199 Details available
An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an HTTP request, causing the device to become unavailable.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.390Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-5449 vulnerable 2026-06-08 05:11:51.052120 Details available
A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to perform a denial of service attack.
Published: 2018-03-05T17:00:00.000Z
Updated: 2024-08-05T05:33:44.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11427 vulnerable 2026-06-08 05:10:38.454331 Details available
CSRF tokens are not used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior, which makes it possible to perform CSRF attacks on the device administrator.
Published: 2019-07-03T14:46:54.000Z
Updated: 2024-08-05T08:10:14.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11426 vulnerable 2026-06-08 05:10:38.453945 Details available
A weak Cookie parameter is used in the web application of Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker can brute force parameters required to bypass authentication and access the web interface to use all its functions except for password change.
Published: 2019-07-03T14:50:10.000Z
Updated: 2024-08-05T08:10:14.334Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11423 vulnerable 2026-06-08 05:10:38.445704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11422 vulnerable 2026-06-08 05:10:38.445346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11421 vulnerable 2026-06-08 05:10:38.444951 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11420 vulnerable 2026-06-08 05:10:38.443972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.