CVE-2018-18395 - Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1

CRITICAL

Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1

Published Oct 19, 2018

9.8

CRITICAL

CVSS 3.0

EPSS 1.54%

Hidden Token Access in Moxa ThingsPro IIoT Gateway and Device Management Software Solutions version 2.1.

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Moxa	ThingsPro IIoT Gateway and Device Management Software Solutions	unknown	Affected 2.1

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-10124		Advisory
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/10/18/klcert-18-023-moxa-thingspro-iiot-gateway-and-device-management-software-solutions-hidden-token-access/		x_refsource_MISCThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Kaspersky

Published Oct 19, 2018

Updated Sep 16, 2024

Reserved Oct 16, 2018

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner Kaspersky

Published Oct 19, 2018

Updated Sep 16, 2024

GitHub

No data