CVE-2016-9344

CVE-2016-9344 describes a vulnerability in Moxa MiiNePort E1 (prior to 1.8), E2 (prior to 1.4), and E3 (prior to 1.1) devices, where an attacker can brute force an active session cookie to download configuration files. This vulnerability has a CVSS v3 score of 7.5 (HIGH), indicating a network-based attack with low complexity, requiring no user interaction, and leading to high confidentiality impact. While there is no evidence of active exploitation or publicly available exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has received some community discussion and media coverage, including an article from SecurityWeek.