VULNERABILITY INTELLIGENCE

CVE-2024-6785

CVSS score5.5 MEDIUM

EPSS probability0.11%

CISA KEVNot currently listed

Published2024-09-21

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.

Weakness classification

psirt@moxa.com: CWE-313
nvd@nist.gov: CWE-312

Primary references

psirt@moxa.com — Third Party Advisory, US Government Resource
psirt@moxa.com — Patch, Vendor Advisory