https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T18:33:39.693914+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2017-09878 cnvd-2017-09878 2026-10-06T18:33:39.761729+00:00 cnvd-2017-09878 https://cve.radiocsirt.org/vuln/euvd-2026-75044 EUVD-2026-75044 2026-10-06T18:33:39.761817+00:00 EUVD-2026-75044 https://cve.radiocsirt.org/vuln/fkie_cve-2017-7917 fkie_cve-2017-7917 2026-10-06T18:33:39.761832+00:00

A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.

 https://cve.radiocsirt.org/vuln/ghsa-vvph-6444-j9pj GHSA-vvph-6444-j9pj 2026-10-06T18:33:39.761863+00:00

A Cross-Site Request Forgery issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.

 https://cve.radiocsirt.org/vuln/gsd-2017-7917 gsd-2017-7917 2026-10-06T18:33:39.761882+00:00 gsd-2017-7917 https://cve.radiocsirt.org/vuln/icsa-17-143-01 ICSA-17-143-01 — Moxa OnCell 2026-10-06T18:33:39.761893+00:00

An attacker can freely use brute force to determine parameters needed to bypass authentication.CVE-2017-7915 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The application 's configuration file contains parameters that represent passwords in plaintext.CVE-2017-7913 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The application does not sufficiently verify if a request was intentionally provided by the user who submitted the request, which could allow an attacker to modify the configuration of the device.CVE-2017-7917 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).