CVE-2020-6997

The CVE-2020-6997 entry concerns Moxa EDS-G516E (and related EDS-510E) Ethernet switches. In firmware v5.2 or lower, sensitive information is transmitted over some web applications in cleartext. This can expose confidential data via network interfaces that handle management/web traffic. The entry...

CVE-2020-6997

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext...

CVE-2020-6991

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force...

CVE-2020-6991

CVE-2020-6991 affects Moxa EDS-G516E and EDS-510E Series Ethernet Switches with firmware version 5.2 or lower. The vulnerability is caused by weak password requirements, enabling brute‑force remote access to the device. Impact as described: high severity affecting confidentiality, integrity, and ...

CVE-2020-6981

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication...

CVE-2020-6981

CVE-2020-6981 affects Moxa EDS-G516E Series firmware (and EDS-510E per related advisories) with versions 5.2 or lower. The root cause is the use of hard-coded credentials, enabling an attacker to gain access to the system without proper authentication. Documented impact includes unauthorized acce...

CVE-2020-6979

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibility that confidential data can be recovered...

CVE-2020-6979

CVE-2020-6979 affects Moxa EDS-G516E (and EDS-510E per advisories) with firmware version 5.2 or lower, where a hard-coded cryptographic key is used, increasing the risk that confidential data can be recovered. Affected components are the cryptographic handling paths implementing the hard-coded ke...

CVE-2020-7001

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed...

CVE-2020-7001

CVE-2020-7001 affects Moxa EDS-G516E and EDS-510E Ethernet Switches with firmware 5.2 or lower, where the implementation uses a weak cryptographic algorithm that may disclose confidential information. This is confirmed by multiple sources (NVD entry and Red Hat advisory) describing the weakness a...

CVE-2020-7007

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out of service...

CVE-2020-7007

CVE-2020-7007 affects Moxa EDS-G516E and EDS-510E Ethernet switches with firmware version 5.2 or lower. It describes a stack-based buffer overflow that may allow an attacker to execute arbitrary code or cause a device outage. The vulnerability is rated CRITICAL (CVSS v3.1 base score 9.8, network ...

Moxa EDS-G516E and EDS-510E series hard credential vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A hard credential vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to gain access to the system without proper authentication...

Moxa EDS-G516E and EDS-510E series hard-coded vulnerabilities

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A hard-coded vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to recover confidential data...

Moxa EDS-G516E and EDS-510E series weak cryptographic algorithm vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

Moxa EDS-G516E and EDS-510E series weak password vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

Moxa EDS-G516E and EDS-510E series buffer overflow vulnerability (CNVD-2020-13515)

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A buffer overflow vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...

Moxa EDS-G516E and EDS-510E Series Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G516E series, and EDS-510E series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...

The vulnerability of the microprogrammed Ethernet switch software from Moxa series EDS-405A lies in insufficient validation of input data, allowing a intruder to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending HTTP GET requests to the vulnerable device...

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series, related to buffer overflow, allows a hacker to trigger a service failure.

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending HTTP GET requests to the vulnerable device...