58 matches found
EUVD-2017-5216
Malware in sbrugna...
EUVD-2017-5218
Malware in sbrugna...
EUVD-2017-5215
Malware in sbrugna...
EUVD-2017-5217
Malware in sbrugna...
EUVD-2017-5220
Malware in sbrugna...
EUVD-2017-5219
Malware in sbrugna...
Moxa EDS-G512E Cross-site Scripting (CVE-2017-13700)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Moxa EDS-G512E improper cookie management (CVE-2017-13702)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Moxa EDS-G512E Use of Default Private Keys (CVE-2017-13698)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image available on the MOXA website and could use them against a production switch that has the default keys embedded. This plugin only works with Tenable.ot...
Moxa EDS-G512E improper password storage in backup files (CVE-2017-13701)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method. This plugin only works with...
Moxa EDS-G512E Inadequate Encryption Strength (CVE-2017-13699)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent in cleartext as a POST parameter. An attacker could reverse the password encryption algorithm to...
Moxa EDS Ethernet Switches
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could...
CVE-2019-19707
On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...
CVE-2019-19707
CVE-2019-19707 affects Moxa EDS-G508E, EDS-G512E, and EDS-G516E Ethernet Switches (firmware up to 6.0). The issue enables denial-of-service via PROFINET DCE-RPC endpoint discovery packets, stemming from uncontrolled resource consumption. Impact is DoS on affected devices, potentially taking them ...
CVE-2019-19707: Undefined Security Weakness
On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...
PT-2019-4430
Name of the Vulnerable Software and Affected Versions Moxa EDS-G508E versions through 6.0 Moxa EDS-G512E versions through 6.0 Moxa EDS-G516E versions through 6.0 Description The issue is related to an uncontrolled resource consumption in the firmware of Moxa EDS-G508E, EDS-G512E, and EDS-G516E...
MOXA EDS-G512E Information Disclosure Vulnerability (CNVD-2017-37713)
The MOXA EDS-G512E is a Gigabit Ethernet managed switch. An information disclosure vulnerability exists in MOXA EDS-G512E 5.1 build 16072215. An attacker can exploit this vulnerability to obtain sensitive information...
MOXA EDS-G512E Password Encryption Method Vulnerability
The MOXA EDS-G512E is a Gigabit Ethernet managed switch. A password encryption method vulnerability exists in the MOXA EDS-G512E 5.1 build 16072215. An attacker can reverse the password encryption algorithm to retrieve the value...
CVE-2017-13701
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method...
Design/Logic Flaw
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent in cleartext as a POST parameter. An attacker could reverse the password encryption algorithm to...