Moxa PT-7528 and PT-7828 Series Ethernet Switches

🗓️ 25 Feb 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 94 Views

Moxa PT-7528 and PT-7828 Series Ethernet Switches have multiple vulnerabilities including stack-based buffer overflow, weak cryptographic algorithm, hard-coded cryptographic key and credentials, weak password requirements, and information exposure. Exploitation may lead to device crash or unauthorized access to sensitive information

Reporter	Title	Published	Views	Family All 61
BDU FSTEC	The vulnerability of the SwitchDHCPSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a perpetrator to cause service interruptions.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software in Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows a hacker to execute arbitrary code or cause a service failure.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of cryptographic algorithms that contain defects, allowing attackers to decrypt the login credentials.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of a rigidly encrypted cryptographic key for encrypting account data. This allows attackers to enhance their privileges.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of rigidly encoded configuration data for the device’s console. This allows attackers to exploit their privileges to gain unauthorized access.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the lack of restrictions on excessive authentication attempts, allowing attackers to circumvent existing security restrictions.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows attackers to disclose protected information.	25 Sep 201900:00	–	bdu_fstec
CNVD	Moxa PT-7528 and PT-7828 Series Information Disclosure Vulnerability	26 Feb 202000:00	–	cnvd
CNVD	Moxa EDS-G516E and EDS-510E series buffer overflow vulnerability	26 Feb 202000:00	–	cnvd
CNVD	Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm Vulnerability	26 Feb 202000:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-056-03.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-056-03
us-cert	www.us-cert.gov/ncas/tips/ST04-014
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B

25 Feb 2020 00:00Current

9.7High risk

Vulners AI Score9.7

CVSS 210

CVSS 3.19.8

EPSS0.0283