This security advisory addresses CVE-2016-9361 affecting the NE-4100 Series, MiiNePort E1 Series, MiiNePort E2 Series, and MiiNePort E3 Series. The vulnerability allows an attacker to retrieve administration passwords without proper authentication. This flaw potentially compromises the security of the affected devices by enabling unauthorized access to administrative controls, allowing malicious actors to alter configurations or disrupt operations.

The Identified Vulnerability Type and Potential Impact

Vulnerability Scoring Details 

Affected Products

The affected products and firmware versions are listed below.

Solutions

Moxa has developed appropriate solutions to address vulnerability. The solutions for the affected products are listed below.

Mitigation

• Minimize network exposure to ensure the device is not accessible from the Internet.
• When remote access is required, use secure methods, such as Virtual Private Networks (VPNs).
• Implement IDS or Intrusion Prevention System (IPS) to detect and prevent exploitation attempts. These systems can provide an additional layer of defense by monitoring network traffic for signs of attacks.

Revision History