Lucene search
+L

390 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•9 views

CVE-2020-6991: Weak Password Requirements

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force...

9.8CVSS8.2AI score0.01506EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/24 12:00 a.m.•6 views

CVE-2020-6981: Use of Hard-coded Credentials

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication...

10CVSS8AI score0.02271EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/02/26 12:00 a.m.•26 views

Moxa EDS-G516E and EDS-510E series buffer overflow vulnerability (CNVD-2020-13515)

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A buffer overflow vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...

10CVSS8.1AI score0.029EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/02/26 12:00 a.m.•18 views

Moxa EDS-G516E and EDS-510E series weak cryptographic algorithm vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

7.5CVSS6.8AI score0.00973EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/02/26 12:00 a.m.•31 views

Moxa EDS-G516E and EDS-510E series hard credential vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A hard credential vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to gain access to the system without proper authentication...

10CVSS7.1AI score0.02271EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/02/26 12:00 a.m.•16 views

Moxa EDS-G516E and EDS-510E series hard-coded vulnerabilities

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A hard-coded vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to recover confidential data...

7.5CVSS6.9AI score0.01482EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/02/26 12:00 a.m.•32 views

Moxa EDS-G516E and EDS-510E series weak password vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

9.8CVSS6.9AI score0.01506EPSS
SaveExploits0References1
ICS
ICS
•added 2020/02/25 12:00 a.m.•84 views

Moxa EDS-G516E and EDS-510E Series Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G516E series, and EDS-510E series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...

10CVSS8.7AI score0.029EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2020/01/08 12:00 a.m.•27 views

Moxa EDS-405A Series Buffer Overflow DoS

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending HTTP GET requests to the vulnerable device...

8.6CVSS5.9AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/01/08 12:00 a.m.•20 views

Moxa Ethernet Switch DoS

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending HTTP GET requests to the vulnerable device...

8.6CVSS5.5AI score
SaveExploits0References1Affected Software1
ICS
ICS
•added 2019/12/19 12:00 a.m.•84 views

Moxa EDS Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could...

7.8CVSS7.7AI score0.01333EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2019/12/11 1:03 a.m.•57 views

CVE-2019-19707

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...

7.5AI score0.01333EPSS
SaveExploits0References1
CVE
CVE
•added 2019/12/11 1:03 a.m.•119 views

CVE-2019-19707

CVE-2019-19707 affects Moxa EDS-G508E, EDS-G512E, and EDS-G516E Ethernet Switches (firmware up to 6.0). The issue enables denial-of-service via PROFINET DCE-RPC endpoint discovery packets, stemming from uncontrolled resource consumption. Impact is DoS on affected devices, potentially taking them ...

7.8CVSS7.5AI score0.01333EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/11 12:00 a.m.•7 views

CVE-2019-19707: Undefined Security Weakness

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...

7.8CVSS7.3AI score0.01333EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/11/20 12:00 a.m.•9 views

PT-2019-4430

Name of the Vulnerable Software and Affected Versions Moxa EDS-G508E versions through 6.0 Moxa EDS-G512E versions through 6.0 Moxa EDS-G516E versions through 6.0 Description The issue is related to an uncontrolled resource consumption in the firmware of Moxa EDS-G508E, EDS-G512E, and EDS-G516E...

7.8CVSS0.01333EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2019/11/07 12:00 a.m.•4 views

PT-2019-4293

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A series Ethernet switch software affected versions not specified Description The issue exists due to insufficient input validation in the software. An attacker, acting remotely, can exploit this to cause a denial of service by...

7.8CVSS5.7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/11/07 12:00 a.m.•3 views

PT-2019-4294

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A series Ethernet switch software affected versions not specified Description The issue is related to a buffer overflow in the software of Moxa EDS-405A series Ethernet switches. An attacker, acting remotely, can exploit this issue...

7.8CVSS6.1AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2019/10/24 12:00 a.m.•21 views

Moxa EDS-810 Web Console Command Injection

The vulnerability of Moxa EDS-810 microcontroller-based web consoles exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS5.9AI score0.10622EPSS
SaveExploits4References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/10/24 12:00 a.m.•24 views

Moxa EDS-810 Access Control Disclosure

The vulnerability of Moxa EDS-810 microcontroller-based software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information using specially crafted queries...

5.3CVSS5.5AI score0.06499EPSS
SaveExploits5References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2019/09/25 12:00 a.m.•18 views

Moxa EDS-G516E Embedded Web Server DoS

The vulnerability of the SwitchDHCPSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures by modifying the...

7.8CVSS5.8AI score0.03498EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder