CVE-2024-6785

6.8 mediumEPSS 0.1%

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.

Severity

CVSS 4.0

6.8 medium

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

7.1 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 1% of CVEs (scores of 2026-10-31)
CWEs: CWE-312, CWE-313
Published: 2024-09-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

moxa:mxview_one
moxa:mxview_one_central_manager

References

https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series

Check your stack JSON