Moxa EDS-G516E and EDS-510E Series Ethernet Switches

🗓️ 25 Feb 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 70 Views

Moxa EDS-G516E and EDS-510E Series Ethernet Switches with critical vulnerabilities including stack-based buffer overflow, cryptographic key issues, cleartext transmission, and weak password requirements

Reporter	Title	Published	Views	Family All 67
BDU FSTEC	The vulnerability of the embedded web-server microprogramming software of Moxa EDS-G516E and Moxa EDS-510E switches allows a hacker to execute arbitrary code or cause malfunctions in the device’s functionality.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of Moxa EDS-G516E and Moxa EDS-510E switches, which is related to the use of cryptographic algorithms containing defects, allows a hacker to gain unauthorized access to protected information.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software for Moxa EDS-G516E and Moxa EDS-510E switches lies in the use of a rigidly encrypted cryptographic key in the configuration file. This allows an intruder to gain unauthorized access to the protected information.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software for Moxa EDS-G516E and Moxa EDS-510E switches lies in the use of rigidly encoded account data, which allows attackers to escalate their privileges.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches, which is related to the default use of the HTTP protocol, allows attackers to intercept administrator credentials and other confidential information, thereby gaining access to the control system.	25 Sep 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the lack of restrictions on excessive authentication attempts, allowing a hacker to gain full access to the system.	25 Sep 201900:00	–	bdu_fstec
CNVD	Moxa EDS-G516E and EDS-510E series plaintext transfer vulnerability	26 Feb 202000:00	–	cnvd
CNVD	Moxa EDS-G516E and EDS-510E series weak password vulnerability	26 Feb 202000:00	–	cnvd
CNVD	Moxa EDS-G516E and EDS-510E series buffer overflow vulnerability (CNVD-2020-13515)	26 Feb 202000:00	–	cnvd
CNVD	Moxa EDS-G516E and EDS-510E series weak cryptographic algorithm vulnerability	26 Feb 202000:00	–	cnvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-056-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-056-04
us-cert	www.us-cert.gov/ncas/tips/ST04-014
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B

25 Feb 2020 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 210

CVSS 3.19.8

EPSS0.0272