var-201702-0849
Vulnerability from variot
An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration data are stored in a file that is not encrypted. Moxa MiiNePort is an embedded device networking module designed by Moxa for manufacturers to connect serial devices to the network.
An information disclosure vulnerability exists in Moxa MiiNePort, which originated from the program's failure to encrypt configuration data in files. An attacker could use this vulnerability to gain access to the target system. Multiple Moxa MiiNePort products are prone to an information-disclosure vulnerability and a security-bypass vulnerability. Successful attacks can allow an attacker to obtain sensitive information or bypass certain security restrictions
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201702-0849",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "miineport e1",
"scope": "lte",
"trust": 1.0,
"vendor": "moxa",
"version": "1.7"
},
{
"model": "miineport e3",
"scope": "lte",
"trust": 1.0,
"vendor": "moxa",
"version": "1.0"
},
{
"model": "miineport e2",
"scope": "lte",
"trust": 1.0,
"vendor": "moxa",
"version": "1.3"
},
{
"model": "miineport e3",
"scope": "eq",
"trust": 0.9,
"vendor": "moxa",
"version": "1.0"
},
{
"model": "miineport e1",
"scope": null,
"trust": 0.8,
"vendor": "moxa",
"version": null
},
{
"model": "miineport e1",
"scope": "lt",
"trust": 0.8,
"vendor": "moxa",
"version": "1.8"
},
{
"model": "miineport e2",
"scope": null,
"trust": 0.8,
"vendor": "moxa",
"version": null
},
{
"model": "miineport e2",
"scope": "lt",
"trust": 0.8,
"vendor": "moxa",
"version": "1.4"
},
{
"model": "miineport e3",
"scope": null,
"trust": 0.8,
"vendor": "moxa",
"version": null
},
{
"model": "miineport e3",
"scope": "lt",
"trust": 0.8,
"vendor": "moxa",
"version": "1.1"
},
{
"model": "miineport",
"scope": null,
"trust": 0.6,
"vendor": "moxa",
"version": null
},
{
"model": "miineport e2",
"scope": "eq",
"trust": 0.6,
"vendor": "moxa",
"version": "1.3"
},
{
"model": "miineport e1",
"scope": "eq",
"trust": 0.6,
"vendor": "moxa",
"version": "1.7"
},
{
"model": "miineport e2",
"scope": "eq",
"trust": 0.3,
"vendor": "moxa",
"version": "1.0"
},
{
"model": "miineport e1",
"scope": "eq",
"trust": 0.3,
"vendor": "moxa",
"version": "1.0"
},
{
"model": "miineport e3",
"scope": "ne",
"trust": 0.3,
"vendor": "moxa",
"version": "1.1"
},
{
"model": "miineport e2",
"scope": "ne",
"trust": 0.3,
"vendor": "moxa",
"version": "1.4"
},
{
"model": "miineport e1",
"scope": "ne",
"trust": 0.3,
"vendor": "moxa",
"version": "1.8"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "BID",
"id": "94783"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
},
{
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/h:moxa:miineport_e1",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:moxa:miineport_e1_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:moxa:miineport_e2",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:moxa:miineport_e2_firmware",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/h:moxa:miineport_e3",
"vulnerable": true
},
{
"cpe22Uri": "cpe:/o:moxa:miineport_e3_firmware",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Aditya Sood",
"sources": [
{
"db": "BID",
"id": "94783"
}
],
"trust": 0.3
},
"cve": "CVE-2016-9346",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CVE-2016-9346",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 1.8,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "CNVD",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "CNVD-2016-12353",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.6,
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"version": "2.0"
},
{
"accessComplexity": "LOW",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "NONE",
"baseScore": 5.0,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 10.0,
"id": "VHN-98166",
"impactScore": 2.9,
"integrityImpact": "NONE",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:N/AC:L/AU:N/C:P/I:N/A:N",
"version": "2.0"
}
],
"cvssV3": [
{
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"author": "nvd@nist.gov",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"exploitabilityScore": 3.9,
"id": "CVE-2016-9346",
"impactScore": 1.4,
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"trust": 1.8,
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"version": "3.0"
}
],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2016-9346",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2016-9346",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNVD",
"id": "CNVD-2016-12353",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "CNNVD",
"id": "CNNVD-201612-234",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-98166",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "VULHUB",
"id": "VHN-98166"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
},
{
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration data are stored in a file that is not encrypted. Moxa MiiNePort is an embedded device networking module designed by Moxa for manufacturers to connect serial devices to the network. \n\nAn information disclosure vulnerability exists in Moxa MiiNePort, which originated from the program\u0027s failure to encrypt configuration data in files. An attacker could use this vulnerability to gain access to the target system. Multiple Moxa MiiNePort products are prone to an information-disclosure vulnerability and a security-bypass vulnerability. \nSuccessful attacks can allow an attacker to obtain sensitive information or bypass certain security restrictions",
"sources": [
{
"db": "NVD",
"id": "CVE-2016-9346"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "BID",
"id": "94783"
},
{
"db": "VULHUB",
"id": "VHN-98166"
}
],
"trust": 2.52
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2016-9346",
"trust": 3.4
},
{
"db": "ICS CERT",
"id": "ICSA-16-343-01",
"trust": 3.4
},
{
"db": "BID",
"id": "94783",
"trust": 2.0
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201612-234",
"trust": 0.7
},
{
"db": "CNVD",
"id": "CNVD-2016-12353",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-98166",
"trust": 0.1
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "VULHUB",
"id": "VHN-98166"
},
{
"db": "BID",
"id": "94783"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
},
{
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"id": "VAR-201702-0849",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "VULHUB",
"id": "VHN-98166"
}
],
"trust": 1.7
},
"iot_taxonomy": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"category": [
"ICS"
],
"sub_category": null,
"trust": 0.6
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
}
]
},
"last_update_date": "2024-11-23T22:13:10.282000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "\u30b7\u30ea\u30a2\u30eb\u2212\u30a4\u30fc\u30b5\u30cd\u30c3\u30c8\u30fb\u30e2\u30b8\u30e5\u30fc\u30eb",
"trust": 0.8,
"url": "http://japan.moxa.com/product/Serial_to_Ethernet_embedded_Device_server.htm"
},
{
"title": "Patch for Moxa MiiNePort Information Disclosure Vulnerability (CNVD-2016-12353)",
"trust": 0.6,
"url": "https://www.cnvd.org.cn/patchInfo/show/85875"
},
{
"title": "Moxa MiiNePort Repair measures for session hijacking vulnerabilities",
"trust": 0.6,
"url": "http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=66271"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-310",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-98166"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 3.4,
"url": "https://ics-cert.us-cert.gov/advisories/icsa-16-343-01"
},
{
"trust": 1.7,
"url": "http://www.securityfocus.com/bid/94783"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-9346"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-9346"
},
{
"trust": 0.3,
"url": "http://www.moxa.com/"
}
],
"sources": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "VULHUB",
"id": "VHN-98166"
},
{
"db": "BID",
"id": "94783"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
},
{
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"db": "VULHUB",
"id": "VHN-98166"
},
{
"db": "BID",
"id": "94783"
},
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
},
{
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-12-15T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"date": "2017-02-13T00:00:00",
"db": "VULHUB",
"id": "VHN-98166"
},
{
"date": "2016-12-08T00:00:00",
"db": "BID",
"id": "94783"
},
{
"date": "2017-03-10T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"date": "2016-12-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201612-234"
},
{
"date": "2017-02-13T21:59:01.800000",
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2016-12-15T00:00:00",
"db": "CNVD",
"id": "CNVD-2016-12353"
},
{
"date": "2017-02-23T00:00:00",
"db": "VULHUB",
"id": "VHN-98166"
},
{
"date": "2016-12-20T01:08:00",
"db": "BID",
"id": "94783"
},
{
"date": "2017-03-10T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2016-007684"
},
{
"date": "2016-12-09T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201612-234"
},
{
"date": "2024-11-21T03:00:59.720000",
"db": "NVD",
"id": "CVE-2016-9346"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "plural Moxa MiiNePort Product vulnerabilities",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2016-007684"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "encryption problem",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201612-234"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…