ICSA-19-353-01

icsaUScisa_csaf_ot

Moxa EDS Ethernet Switches

view advisory published 2019-12-19

Successful exploitation of this vulnerability could cause the target device to go out of service.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-19707UShigh7.5—
On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint discovery packets.
02

references

External citations — patches, advisories, analysis.

03

remediations (3)

  • MitigationEDS-G508E Series

    Moxa has developed a patch to address the vulnerability. Users can contact Moxa Technical Support (logon required) for the security patch. Users can also view Moxa's security advisory published on this vulnerability.

    https://www.moxa.com/en/support/support/technical-support
  • MitigationEDS-G512E Series

    Moxa has developed a patch to address the vulnerability. Users can contact Moxa Technical Support (logon required) for the security patch. Users can also view Moxa's security advisory published on this vulnerability.

    https://www.moxa.com/en/support/support/technical-support
  • MitigationEDS-G516E Series

    Moxa has developed a patch to address the vulnerability. Users can contact Moxa Technical Support (logon required) for the security patch. Users can also view Moxa's security advisory published on this vulnerability.

    https://www.moxa.com/en/support/support/technical-support
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan