CVE-2017-13700: Improper Neutralization of Input During Web Page Generation

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface...

PT-2017-13031

Name of the Vulnerable Software and Affected Versions MOXA EDS-G512E version 5.1 build 16072215 Description An issue allows cookies to be stolen, manipulated, and reused. Recommendations For MOXA EDS-G512E version 5.1 build 16072215, at the moment, there is no information about a newer version th...

PT-2017-3776

Name of the Vulnerable Software and Affected Versions Moxa IKS and EDS affected versions not specified Description The issue is related to the generation of a predictable cookie using an MD5 hash, which can be exploited by an attacker to capture the administrator's password. This could potentiall...

PT-2017-3773

Name of the Vulnerable Software and Affected Versions Moxa IKS and EDS affected versions not specified Description The issue is related to the lack of sufficient measures to prevent multiple failed authentication attempts in Moxa IKS and EDS, which may allow an attacker to discover passwords via...

PT-2017-3772 · Moxa · Moxa Eds-405A +3

Name of the Vulnerable Software and Affected Versions: Moxa EDS-405A versions affected versions not specified Moxa EDS-408A versions affected versions not specified Moxa EDS-510A versions affected versions not specified Moxa IKS versions affected versions not specified Description: The issue is...

PT-2017-3775

Name of the Vulnerable Software and Affected Versions Moxa EDS and IKS affected versions not specified Description The issue is related to the storage of passwords in plaintext, which could allow an attacker to gain unauthorized access to sensitive information. This could potentially be exploited...

PT-2017-3774

Name of the Vulnerable Software and Affected Versions Moxa EDS versions 3.8 and prior Moxa IKS-G6824A series versions 4.5 and prior Description The issue is related to the lack of encryption for protected data in the firmware of Moxa EDS and IKS switches. This may allow a remote attacker to gain...

PT-2017-3797

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the PTPSettingEnable component of the embedded web server in the firmware of Moxa EDS-G516E and Moxa EDS-510E switches...

PT-2017-3794

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the stack of the dot1xRadiusServerSetting function of the embedded web server in the firmware of Moxa EDS-G516E and Moxa...

PT-2017-3790

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E affected versions not specified Moxa EDS-510E affected versions not specified Description The issue is related to the use of an unstable cryptographic algorithm in configuration files. This could allow a remote attacker to gain...

PT-2017-3795

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the UDPmessageSetting component of the embedded web server in the firmware of Moxa EDS-G516E and Moxa EDS-510E switches...

PT-2017-3793

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to the use of hardcoded credentials in the firmware of Moxa EDS-G516E and Moxa EDS-510E switches. An attacker may exploi...

PT-2017-3799

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series firmware versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to weak password requirements, which may allow an attacker to gain access using brute force. This can enable a...

PT-2017-3796

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E versions affected versions not specified Moxa PT-7528 series firmware versions prior to 4.1 Moxa PT-7828 series firmware versions prior to 3.10 Description The issue is related to a buffer overflow in the web...

PT-2017-3789

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series firmware version 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the stack of the embedded web server in the firmware of Moxa EDS-G516E and Moxa EDS-510E...

PT-2017-3791

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series versions 5.2 and earlier Moxa EDS-510E affected versions not specified Description The issue is related to the use of a weak cryptographic algorithm in the firmware of the affected products. This weakness may allow an...

PT-2017-3798

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to the use of the HTTP protocol by default in the implementation of the "Basic HTTP Authorization" method, which can allow a...

PT-2017-3792

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to the use of a hard-coded cryptographic key in the configuration file of the affected products. This increases the...

Moxa EDS Device Detection (HTTP)

HTTP based detection of Moxa EDS devices. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.106106...

Moxa EDS-405A/408A < 3.6 Multiple Vulnerabilities

Moxa EDS-405A and EDS-408A devices are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPEPREFIX =...