Moxa Nport w2x50a Firmware vulnerabilities

2 CVEs affecting Moxa Nport w2x50a Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-19660, published 2018-12-06.

More from Moxa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-19660, published 2018-12-06. High severity, CVSS 8.8. EPSS: 28.8% chance of exploitation in the next 30 days. An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP…
• CVE-2018-19659, published 2018-12-06. High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days. An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmware before 2.2 Build_18082311. A specially crafted HTTP…