{"id":"CVE-2024-6785","aliases":["EUVD-2024-47815","GHSA-8hgr-rp5m-j4mg"],"status":"published","title":"MXview One and MXview One Central Manager Series store cleartext credentials in a local file","description":"The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.","severity":{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00113,"percentile":0.01445,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-312","CWE-313"],"published":"2024-09-21T04:07:27Z","modified":"2026-06-17T08:18:42Z","products":[{"vendor":"moxa","product":"mxview one central manager series"},{"vendor":"moxa","product":"mxview one series"},{"vendor":"moxa","product":"mxview_one"},{"vendor":"moxa","product":"mxview_one_central_manager"}],"references":[{"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240735-multiple-vulnerabilities-in-mxview-one-and-mxview-one-central-manager-series","tags":["vendor-advisory","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-24-268-05","tags":["third-party-advisory","Third Party Advisory","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-6785"},{"url":"https://github.com/advisories/GHSA-8hgr-rp5m-j4mg"}],"sources":{"cve":[{"id":"CVE-2024-6785","title":"MXview One and MXview One Central Manager Series store cleartext credentials in a local file","description":"The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.","status":"published","published":"2024-09-21T04:07:27.736Z","modified":"2024-09-26T06:51:57.427Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-313"],"updated_at":"2026-11-02T14:34:11.638716Z"}],"euvd":[{"id":"EUVD-2024-47815","description":"The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.","status":"published","published":"2024-09-21T04:07:27Z","modified":"2024-09-26T06:51:57Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-03T00:28:10.832665Z"}],"ghsa":[{"id":"GHSA-8hgr-rp5m-j4mg","title":"The configuration file stores credentials in cleartext. An attacker with local access rights can...","description":"The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.","status":"published","published":"2024-09-21T06:30:43Z","modified":"2024-09-27T21:32:57Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-312","CWE-313"],"updated_at":"2026-11-02T14:58:22.484222Z"}],"nvd":[{"id":"CVE-2024-6785","description":"The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure.","status":"published","published":"2024-09-21T05:15:11.86Z","modified":"2026-06-17T08:18:42.497Z","cvss":[{"version":"4.0","score":6.8,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-313","CWE-312"],"updated_at":"2026-11-02T14:10:27.456509Z"}]}}