CVE-2016-2286

CVE-2016-2286 describes a critical vulnerability in several Moxa MiiNePort E1, E2, and E3 series devices, where a blank default password allows remote attackers to gain unauthorized access. This vulnerability carries a high CVSSv3 score of 7.5, indicating a severe risk due to its network-based attack vector and low attack complexity, potentially leading to full compromise of the affected devices. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, suggesting awareness within the security community. Organizations using the specified Moxa devices should prioritize changing default passwords to mitigate this risk.