{"id":"CVE-2024-6785","state":"PUBLISHED","title":"MXview One and MXview One Central Manager Series store cleartext credentials in a local file","description":"The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.","publishedAt":"2024-09-21T04:07:27.736Z","updatedAt":"2024-09-26T06:51:57.427Z","severity":{"score":6.8,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","source":"Moxa"},"assigner":"Moxa","products":["Moxa MXview One Series","Moxa MXview One Central Manager Series"],"affected":[{"vendor":"Moxa","product":"MXview One Series","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.3.0","versionType":"custom"}]},{"vendor":"Moxa","product":"MXview One Central Manager Series","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.0.0","versionType":"custom"}]}],"references":["https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series","https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05"],"weaknesses":["CWE-313"],"ingestedAt":"2026-10-29T20:08:12.933Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/6xxx/CVE-2024-6785.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-6785","state":"PUBLISHED","datePublished":"2024-09-21T04:07:27.736Z","dateUpdated":"2024-09-26T06:51:57.427Z","assignerShortName":"Moxa","assignerOrgId":"2e0a0ee2-d866-482a-9f5e-ac03d156dbaa","dateReserved":"2024-07-16T09:32:39.526Z"},"containers":{"cna":{"title":"MXview One and MXview One Central Manager Series store cleartext credentials in a local file","descriptions":[{"lang":"en","value":"The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure."}],"affected":[{"vendor":"Moxa","product":"MXview One Series","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.3.0","versionType":"custom"}]},{"vendor":"Moxa","product":"MXview One Central Manager Series","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"1.0.0","versionType":"custom"}]}],"references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series","tags":["vendor-advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":6.8,"baseSeverity":"MEDIUM","privilegesRequired":"LOW","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"NONE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-313","description":"CWE-313: Cleartext Storage in a File or on Disk","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Moxa","orgId":"2e0a0ee2-d866-482a-9f5e-ac03d156dbaa","dateUpdated":"2024-09-26T06:51:57.427Z"},"credits":[{"lang":"en","type":"finder","value":"Noam Moshe of Claroty Research - Team82"}],"datePublic":"2024-09-21T03:58:00.000Z","impacts":[{"capecId":"CAPEC-647","descriptions":[{"lang":"en","value":"CAPEC-647: Collect Data from Registries"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"

Moxa has developed appropriate solutions to address vulnerability. The solutions for affected products are listed below.

"}],"value":"Moxa has developed appropriate solutions to address vulnerability. The solutions for affected products are listed below.\n\n * MXview One Series: Upgrade to the 1.4.1 version\n * MXview One Central Manager Series: Upgrade to the 1.0.3 version"}],"source":{"discovery":"UNKNOWN"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":""}],"value":"* Minimize network exposure to ensure the device is not accessible from the Internet.\n * It is highly recommended to change the default credentials immediately upon your first login to the service. This helps enhance security and prevent unauthorized access"}],"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-23T14:03:22.675217Z","id":"CVE-2024-6785","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-23T14:03:30.646Z"}}]}}}