CVE-2018-18396

CVE-2018-18396: vulnerability in Moxa ThingsPro IIoT Gateway and Device…

Published · Updated

Follow this CVE+ Monitor ThingsPro IIoT Gateway and Device Management Software Solutions

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.3%
In short

A vulnerability in Moxa ThingsPro version 2.1 allows attackers to run malicious code remotely on affected devices without proper authentication, potentially taking full control of the system.

Technical detail

CVE-2018-18396 involves a remote code execution flaw in Moxa ThingsPro IIoT Gateway v2.1 accessible over the network without authentication requirements. Exploitation enables arbitrary command execution with the privileges of the affected service, compromising the confidentiality, integrity, and availability of the gateway and connected industrial systems.

Summary generated and translated by AI from the official description.
Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
Affected products
Moxa · ThingsPro IIoT Gateway and Device Management Software Solutions
Related CVEs — Moxa ThingsPro IIoT Gateway and Device…

In the same product, most dangerous first.

CVE-2018-18395—CVE-2018-18395EPSS 1.5%CVE-2018-18390—CVE-2018-18390EPSS 1.1%CVE-2018-18391—CVE-2018-18391EPSS 1.0%CVE-2018-18392—CVE-2018-18392EPSS 1.0%CVE-2018-18393—CVE-2018-18393EPSS 1.0%CVE-2018-18394—CVE-2018-18394EPSS 0.7%