Moxa Miineport e3 Firmware vulnerabilities

5 CVEs affecting Moxa Miineport e3 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-9346, published 2017-02-13.

More from Moxa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-9344, published 2017-02-13. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. An attacker may be able to brute force an active session cookie to be able…
• CVE-2016-2295, published 2016-05-31. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614,…
• CVE-2016-2286, published 2016-05-31. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242 devices with firmware 1.1 Build 10080614,…
• CVE-2016-9346, published 2017-02-13. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered in Moxa MiiNePort E1 versions prior to 1.8, E2 versions prior to 1.4, and E3 versions prior to 1.1. Configuration data are stored in a file that is not encrypted.
• CVE-2016-2285, published 2016-05-31. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Build 09120714, MiiNePort_E1_7080 devices with firmware 1.1.10 Build 09120714, MiiNePort_E2_1242…