Moxa Thingspro — known CVE vulnerabilities

Every CVE whose affected-product data names Moxa Thingspro, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2018-18393 — CVSS 9.8 (critical): Password Management Issue in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18394 — CVSS 9.8 (critical): Sensitive Information Stored in Clear Text in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18395 — CVSS 9.8 (critical): Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18396 — CVSS 9.8 (critical): Remote Code Execution in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18391 — CVSS 8.8 (high): User Privilege Escalation in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18392 — CVSS 8.8 (high): Privilege Escalation via Broken Access Control in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.
• CVE-2018-18390 — CVSS 7.5 (high): User Enumeration in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.