CVE-2016-4503

9.8 criticalEPSS 2.8%

Critical (9.8) in moxa device server web console 5232-n firmware. EPSS 2.8% chance of exploitation in the next 30 days.

Moxa Device Server Web Console 5232-N allows remote attackers to bypass authentication, and consequently modify settings and data, via vectors related to reading a cookie parameter containing a UserId value.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.8% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2016-07-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moxa:device_server_web_console_5232-n_firmware

References

http://www.securityfocus.com/bid/91670
https://ics-cert.us-cert.gov/advisories/ICSA-16-189-02
http://www.securityfocus.com/bid/91670
https://ics-cert.us-cert.gov/advisories/ICSA-16-189-02

Check your stack JSON