Unquoted Search Path Vulnerability in Moxa DACenter
CVE-2016-9356

7.8HIGH

Key Information:

Vendor

Moxa
Status
Moxa Dacenter 1.4 And Older
Vendor
CVE Published:
13 February 2017

What is CVE-2016-9356?

An unquoted search path vulnerability has been identified in Moxa DACenter up to version 1.4, which could allow an unauthorized user to execute malicious binaries on the system. This issue arises due to the application not properly encapsulating the file paths of executable files in quotes, leading to potential security risks. Users are encouraged to upgrade to a secure version and implement best practices to mitigate possible exploitation.

Affected Version(s)

Moxa DACenter 1.4 and older Moxa DACenter 1.4 and older

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-348-02
x_refsource_MISC
http://www.securityfocus.com/bid/94891
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.