ICSA-20-056-03

icsaUScisa_csaf_ot

Moxa PT-7528 and PT-7828 Series Ethernet Switches

view advisory published 2020-02-25

Successful exploitation of these vulnerabilities could crash the device or allow access to sensitive information.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2020-6995UScritical9.8—
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an at…
CVE-2020-6993UShigh7.5—
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service…
CVE-2020-6985UScritical9.8OT elevated—
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console.
CVE-2020-6989UScritical9.8—
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a den…
CVE-2020-6987UShigh7.5OT elevated—
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow…
CVE-2020-6983UShigh7.5OT elevated—
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • MitigationPT-7528 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7528 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7528 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7528 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7528 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7528 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7828 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7828 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7828 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7828 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7828 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

  • MitigationPT-7828 Series

    Moxa also recommends that users apply the security patch and enable “Account Login Failure Lockout” functions to eliminate any potential risk.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan