Aarón Flecha Menéndez

CLICKJACKING

Denial of service through specific packets

WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION

Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s web service that could impact authenticated users interacting with the device’s

An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header

Code injection vulnerability in IDF and ZLF

Uncontrolled resource consumption vulnerability in IDF and ZLF

CORS vulnerability in IDF and ZLF

Stored Cross-Site Scripting (XSS) vulnerability in IDF and ZLF

Code injection vulnerability in IDF and ZLF