Mxview One
Approved changes feed: RSS · Atom
cpe:2.3:a:moxa:mxview_one:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Moxa (98e7f712-aaf6-5b76-a35e-6cb93ba6791f) |
|---|---|
| Product | Mxview One (c6d0c366-d93b-560f-8b87-705d3b7693f1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6787 |
vulnerable | 2026-06-08 06:58:20.446683 |
MXview One Series vulnerable to Time-of-check Time-of-use (TOCTOU) Race Condition
MEDIUM (5.3)
This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU). By exploiting this race condition, an attacker can write arbitrary files to the system. This could allow the attacker to execute malicious code and potentially cause file losses.
Published: 2024-09-21T04:20:22.302Z
Updated: 2024-09-26T06:53:36.334Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6786 |
vulnerable | 2026-06-08 06:58:20.446175 |
MXview One Series vulnerable to Path Traversal
MEDIUM (6.5)
The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of sensitive information, such as configuration files and JWT signing secrets.
Published: 2024-09-21T04:14:22.667Z
Updated: 2024-09-26T06:52:45.192Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6785 |
vulnerable | 2026-06-08 06:58:20.444659 |
MXview One and MXview One Central Manager Series store cleartext credentials in a local file
MEDIUM (5.5)
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.
Published: 2024-09-21T04:07:27.736Z
Updated: 2024-09-26T06:51:57.427Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.