Moxa recommended mitigations to clear multiple vulnerabilities in its OnCell product line, according to a report with ICS-CERT.
The remotely exploitable vulnerabilities, discovered by independent researcher Maxim Rupp, include an improper restriction of excessive authentication attempts, plaintext storage of a password, and cross-site request forgery.
The following versions of OnCell, a high-speed industrial-grade IP gateway, suffer from the issues:
• OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions
• OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions
• OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions
• OnCell 5104-HSDPA
• OnCell 5104-HSPA
• OnCell 5004-HSPA
Successful exploitation of these vulnerabilities may allow an attacker to use brute force to determine parameters needed to access the application. An attacker may also obtain credentials by obtaining files that store passwords in clear text.
An attacker can freely use brute force to determine parameters needed to bypass authentication.
CVE-2017-7915 is the case number assigned to this vulnerability, which has a CVSS v3 base score of 9.8.
In addition, the application’s configuration file contains parameters that represent passwords in plaintext.
CVE-2017-7913 is the case number assigned to this vulnerability, which has a CVSS v3 base score of 7.3.
Also, the application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.
CVE-2017-7917 is the case number assigned to this vulnerability, which has a CVSS v3 base score of 9.8.
No known public exploits specifically target these vulnerabilities. However, an attacker with low skill level would be able to leverage the vulnerabilities.
The product sees action in the commercial facilities, critical manufacturing, energy, and transportation systems sectors. The product sees use on a global basis.
Taiwan-based Moxa recommends the following mitigations:
• For OnCell G31x0-HSPA and OnCell 5×04-HSPA devices users should upgrade to the latest official firmware Version 1.4 or above.
• For OnCell G31x0-HSDPA and OnCell 5×04-HSDPA devices users should disable HTTP and use other another console such as HTTPS to access web UI or SNMP/Telnet. Moxa reports that the HSDPA devices have been phased out. If further assistance is needed, please contact Moxa.