SB2016102005 - Privilege escalation in Moxa EDR-810
Published: October 20, 2016 Updated: October 21, 2016
Security Bulletin ID
SB2016102005
Severity
High
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Code execution
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Privilege escalation (CVE-ID: CVE-2016-8346)
The vulnerability allows a remote unauthenticated user to gain elevated privileges on the target system.The weakness is due to improper security limitations. By obtaining a specific URL on the web server, attackers can access system configuration and log files that may lead to further attacks.
Successful exploitation of the vulnerability results in privilege escalation on the vulnerable system.
Remediation
Install update from vendor's website.