CVE-2024-6785
MXview One and MXview One Central Manager Series store cleartext credentials in a local file
- State
- Published
- Severity
- 6.8 Medium
- Published
- Sep 21, 2024
- Updated
- Sep 26, 2024
- Reserved
- Jul 16, 2024
Description
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 6.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N | Moxa |
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | Moxa |
Weaknesses
- CWE-313 Cleartext Storage in a File or on Disk
Affected Products
| Product | Versions |
|---|---|
MXview One SeriesMoxa |
|
MXview One Central Manager SeriesMoxa |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.