Víctor Bello Cuevas

CLICKJACKING

Denial of service through specific packets

WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION

Cross-site Scripting has been identified in Moxa’s Ethernet switches, which allows an authenticated administrative attacker to inject malicious scripts to an affected device’s web service that could impact authenticated users interacting with the device’s

An acceptance of extraneous untrusted data with trusted data vulnerability has been identified in Moxa’s Ethernet switches, which allows attackers with administrative privileges to manipulate HTTP Host headers by injecting a specially crafted Host header

Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+

Improper Input Validation vulnerability on CIRCUTOR TCP2RS+

Westermo Lynx 206-F2G