Session Fixation Vulnerability in Moxa MiiNePort Products

CVE-2016-9344

Summary

An issue has been identified in Moxa MiiNePort E1, E2, and E3 products prior to specific versions, where an attacker can exploit session fixation vulnerabilities. By brute-forcing an active session cookie, malicious actors may gain unauthorized access to sensitive configuration files, potentially compromising the security and functionality of the affected devices. It is recommended that users update to the latest firmware versions to mitigate associated risks.

References