CVE-2016-5819

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-03-21 · updated 2026-06-17
Weakness: CWE-79

Description

Moxa G3100V2 Series, editions prior to Version 2.8, and OnCell G3111/G3151/G3211/G3251 Series, editions prior to Version 1.7 allows a reflected cross-site scripting attack which may allow an attacker to execute arbitrary script code in the user’s browser within the trust relationship between their browser and the server.

Affected products

Moxa Oncell G3100V2 Firmware: before 2.8 — fixed in 2.8
Moxa Oncell G3111 Firmware: before 1.7 — fixed in 1.7
Moxa Oncell G3151 Firmware: before 1.7 — fixed in 1.7
Moxa Oncell G3211 Firmware: before 1.7 — fixed in 1.7
Moxa Oncell G3251 Firmware: before 1.7 — fixed in 1.7

How to fix

Upgrade to a fixed version: Moxa Oncell G3100V2 Firmware 2.8; Moxa Oncell G3111 Firmware 1.7; Moxa Oncell G3151 Firmware 1.7; Moxa Oncell G3211 Firmware 1.7; Moxa Oncell G3251 Firmware 1.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2016-5819 or the next vulnerability affects your stack