Number: AV18-036
Date: 01 March 2018
Purpose
The purpose of this advisory is to bring attention to a Moxa OnCell security bulletin.
Assessment
Moxa has released a security bulletin to address multiple vulnerabilities in their OnCell G3100-HSPA Series. Exploitation of this vulnerability may allow for remote code execution.
Affected versions:
OnCell G3100-HSPA Series version 1.4 Build 16062919 and prior.
CVE References: CVE-2018-5455, CVE-2018-5453, CVE-2018-5449
Suggested Action
CCIRC recommends that owners/operators test and deploy the vendor released update or workaround to affected platforms accordingly.
References: