Eugenie Potseluevskaya

The issue is related to insufficient protection of service data in the web interface of the Moxa OnCell G3100-HSPA Series. This can allow a remote attacker to gain unauthorized access to protected information. The proprietary monitoring protocol used by the device does not provide confidentiality, integrity, and authenticity security controls, sending all information in plain text, which can be intercepted and modified. This makes the protocol vulnerable to remote unauthenticated disclosure of sensitive information, including the administrator's password. Additionally, under certain conditions, it is possible to retrieve other information, such as the content of HTTP requests to the device or previously used passwords, due to memory leakages.

The issue is related to improper access control in the web interface of the Moxa OnCell G3100-HSPA Series, which can be exploited by a remote attacker to execute arbitrary code. The device uses a proprietary configuration protocol that lacks confidentiality, integrity, and authenticity security controls, sending all information in plain text. This allows the information to be intercepted and modified. Any commands, including device reboot, configuration download or upload, or firmware upgrade, are accepted and executed by the device without authentication.

The issue is related to a weak `Cookie` parameter used in the web application, which can be brute-forced by an attacker to bypass authentication. This allows access to the web interface, enabling the use of all its functions except for password change. The vulnerability is associated with deficiencies in the authentication procedure, potentially allowing a remote attacker to gain access to the device with root privileges.

The issue is related to the absence of CSRF tokens in the web application, which allows for CSRF attacks on the device administrator. This can be exploited by a remote attacker to perform intersite request forgery. The estimated number of potentially affected devices worldwide is not specified.

A NULL Pointer Dereference issue was discovered, allowing an attacker to perform a denial of service attack by exploiting the application's failure to check for a NULL value.

A Reliance on Cookies without Validation and Integrity Checking issue allows an attacker to bypass authentication by performing a brute force attack on a cookie parameter that can consist of only digits, gaining access to device functions.