Moxa EDS-G516E and EDS-510E Series Ethernet Switches
Successful exploitation of these vulnerabilities could crash the device, execute arbitrary code, and allow access to sensitive information.
beschreibt (7)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-6999US | medium6.5 | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text is the correct size for its buffer. | ||||
| CVE-2020-7007US | critical9.8 | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of service. | ||||
| CVE-2020-7001US | high7.5OT erhöht | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed. | ||||
| CVE-2020-6997US | high7.5OT erhöht | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext. | ||||
| CVE-2020-6991US | critical9.8 | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. | ||||
| CVE-2020-6981US | critical9.8OT erhöht | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication. | ||||
| CVE-2020-6979US | high7.5OT erhöht | — | ||
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovere… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (14)
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-510E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
- MitigationEDS-G516E Series firmware
Enable HTTPS from the “Management Interface” setting.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan