CVE-2016-2285: Cross-site request forgery (CSRF) vulnerability on Moxa MiiNePort_E1_4641 devices with firmware 1.1.10 Buil...

Security readout for executives and security teams

This CVE describes a CSRF flaw in specific Moxa MiiNePort embedded device firmware. If an administrator is authenticated to the device, an attacker may be able to abuse that session through a crafted web request. Business impact depends on whether these devices manage operational or industrial connectivity and whether their management interfaces are reachable. Exposure is most likely where listed Moxa MiiNePort devices run the named firmware and administrators access web management interfaces from general-purpose browsers or networks. Internet-reachable management interfaces would increase risk. Treat this as a targeted operational technology exposure review, not an emergency based on the provided evidence. Prioritize organizations using the listed Moxa devices in production networks, especially where management access is broadly reachable. Mitigation focus: Inventory Moxa MiiNePort E1, E2, and E3 devices and firmware builds.; Check Moxa and CISA/ICS-CERT guidance for fixed firmware or official mitigations.; Restrict device management interfaces to trusted administrative networks only..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.