High severity8.3NVD Advisory· Published Dec 21, 2015· Updated May 6, 2026
CVE-2015-6480
CVE-2015-6480
Description
The MessageBrokerServlet servlet in Moxa OnCell Central Manager before 2.2 does not require authentication, which allows remote attackers to obtain administrative access via a command, as demonstrated by the addUserAndGroup action.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- ics-cert.us-cert.gov/advisories/ICSA-15-328-01nvdThird Party AdvisoryUS Government Resource
- zerodayinitiative.com/advisories/ZDI-15-452/nvd
News mentions
0No linked articles in our index yet.