Moxa Oncell g3110-Hspa-T Firmware vulnerabilities

3 CVEs affecting Moxa Oncell g3110-Hspa-T Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-5455, published 2018-03-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-5455, published 2018-03-05. Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days. A Reliance on Cookies without Validation and Integrity Checking issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application allows a cookie parameter…
CVE-2018-5453, published 2018-03-05. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. An Improper Handling of Length Parameter Inconsistency issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. An attacker may be able to edit the element of an…
CVE-2018-5449, published 2018-03-05. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. A NULL Pointer Dereference issue was discovered in Moxa OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior. The application does not check for a NULL value, allowing for an attacker to…