Moxa Mxview One vulnerabilities

3 CVEs affecting Moxa Mxview One, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-6787, published 2024-09-21.

More from Moxa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-6786, published 2024-09-21. Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days. The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to the disclosure of…
• CVE-2024-6787, published 2024-09-21. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. This vulnerability occurs when an attacker exploits a race condition between the time a file is checked and the time it is used (TOCTOU). By exploiting this race condition, an attacker can write…
• CVE-2024-6785, published 2024-09-21. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to…