vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2017-7917

N/A
Published: May 29, 2017 at 04:00 PM UTC
Updated: June 17, 2026 at 01:25 AM UTC
18 products affected across 1 vendorOncell G3110-hspa FirmwareOncell 5104-hsdpa FirmwareOncell G3150-hsdpa Firmware

Using Moxa OnCell by N/A?

Get instant alerts when new vulnerabilities affect Moxa OnCell - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.5%

Description

A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Oncell 5004-hspa Firmware· Moxa
95%
All versions
moxa-oncell-5004-hspa (same device)
Oncell 5104-hsdpa Firmware· Moxa
95%
All versions
moxa-oncell-5104-hsdpa (same device)
Oncell 5104-hspa Firmware· Moxa
95%
All versions
moxa-oncell-5104-hspa (same device)
Oncell G3110-hsdpa Firmware· Moxa
95%
v ≤ 1.2
moxa-oncell-g3110-hsdpa (same device)
Oncell G3110-hspa Firmware· Moxa
95%
v ≤ 1.3
moxa-oncell-g3110-hspa (same device)
Oncell G3150-hsdpa Firmware· Moxa
95%
v ≤ 1.4
moxa-oncell-g3150-hsdpa (same device)
AWK-1121· Moxa
50%
All versions
AWK-1127· Moxa
50%
All versions
AWK-1131A· Moxa
50%
All versions
AWK-3121-M12-RTG· Moxa
50%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (1)

x_refsource_MISCThird Party AdvisoryUS Government Resource
Source: [email protected]
https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01

CVSS

6.8MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-352

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card