Weakness in Cookie Authentication in Moxa OnCell G3100-HSPA Series

CVE-2018-5455

Summary

A security weakness was identified in Moxa's OnCell G3100-HSPA Series that stems from a lack of proper validation and integrity checking on cookie parameters. Specifically, cookies may be composed solely of digits, enabling an attacker to launch a brute force attack. This could result in unauthorized authentication bypass, granting the attacker access to sensitive device functions and compromising operational integrity.

References