Cross-Site Request Forgery Vulnerability in Moxa OnCell Products

CVE-2017-7917

What is CVE-2017-7917?

A vulnerability exists in Moxa's OnCell series of products that allows attackers to exploit Cross-Site Request Forgery (CSRF) by sending unauthorized requests. The issue arises from the device's failure to properly verify whether a request was made by the actual user. This lack of verification could enable an attacker to modify the device's configuration settings without the user's consent, potentially leading to unauthorized access and further exploitation in industrial environments.

References