Moxa EDS-G516E and EDS-510E Series Ethernet Switches
Successful exploitation of these vulnerabilities could crash the device, execute arbitrary code, and allow access to sensitive information.
describes (7)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-6999US | medium6.5 | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text is the correct size for its buffer. | ||||
| CVE-2020-7007US | critical9.8 | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of service. | ||||
| CVE-2020-7001US | high7.5OT elevated | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. | ||||
| CVE-2020-6997US | high7.5OT elevated | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext. | ||||
| CVE-2020-6991US | critical9.8 | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. | ||||
| CVE-2020-6981US | critical9.8OT elevated | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication. | ||||
| CVE-2020-6979US | high7.5OT elevated | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovere… | ||||
references
External citations — patches, advisories, analysis.
remediations (14)
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan