CVE-2016-5799

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-24 · updated 2026-06-17
Weakness: CWE-285

Description

Moxa OnCell G3100V2 devices before 2.8 and G3111, G3151, G3211, and G3251 devices before 1.7 do not properly restrict authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.

Affected products

Moxa Oncell G3001 Firmware: through 1.6
Moxa Oncell G3100V2 Firmware: through 2.7

References

http://www.securityfocus.com/bid/92606
https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01
http://www.securityfocus.com/bid/92606
https://ics-cert.us-cert.gov/advisories/ICSA-16-236-01

Get alerted when CVE-2016-5799 or the next vulnerability affects your stack