VulnerabilityAnalyzed
CVE-2024-6785
An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.
MEDIUM 6.8EPSS 0.11%
Does this matter?
Lower severity and a low EPSS score (0.11%). Track it; it rarely justifies an emergency change on its own.
Description
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.
- CVSS 4.0
- 6.8 MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.11% probability · 2th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-313, CWE-312
- Affected
- moxa/mxview one · moxa/mxview one central manager
- Source
- psirt@moxa.com
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05Third Party Advisory, US Government Resource
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-seriesPatch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.