{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-05-14T09:58:50.692","vulnerabilities":[{"cve":{"id":"CVE-2018-11421","sourceIdentifier":"cve@mitre.org","published":"2019-07-03T16:15:10.397","lastModified":"2024-11-21T03:43:19.970","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Moxa OnCell G3100-HSPA Series version 1.6 Build 17100315 and prior use a proprietary monitoring protocol that does not provide confidentiality, integrity, and authenticity security controls. All information is sent in plain text, and can be intercepted and modified. The protocol is vulnerable to remote unauthenticated disclosure of sensitive information, including the administrator's password. Under certain conditions, it's also possible to retrieve additional information, such as content of HTTP requests to the device, or the previously used password, due to memory leakages."},{"lang":"es","value":"Moxa OnCell serie G3100-HSPA versión 1.6 Build 17100315 y anteriores usa un protocolo de monitoreo propietario que no proporciona controles de seguridad de confidencialidad, integridad y autenticidad. Toda la información se envía en texto plano, y puede ser interceptada y modificada. El protocolo es vulnerable a la divulgación remota no autenticada de información confidencial, incluida la contraseña del administrador. Bajo ciertas condiciones, también es posible recuperar información adicional, como el contenido de las solicitudes HTTP al dispositivo, o la contraseña utilizada anteriormente, debido a fugas de memoria."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-319"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:moxa:oncell_g3150-hspa_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"4EB5A49A-BC65-46F8-937A-59880E0DF816"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:oncell_g3150-hspa:-:*:*:*:*:*:*:*","matchCriteriaId":"818C840B-A1BB-4D67-9B39-7358542FE0A8"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:moxa:oncell_g3150-hspa-t_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"1.6","matchCriteriaId":"710E168D-27E4-47ED-BAD8-241432767E65"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:moxa:oncell_g3150-hspa-t:-:*:*:*:*:*:*:*","matchCriteriaId":"CBE7E4C9-CB5E-4DA0-8FFA-CA23A15CBC6A"}]}]}],"references":[{"url":"https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-103.md","source":"cve@mitre.org","tags":["Third Party Advisory"]},{"url":"https://github.com/klsecservices/Advisories/blob/master/KL-MOXA-2018-103.md","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"]}]}}]}