Moxa EDS-G516E and EDS-510E Series Ethernet Switches Cleartext Transmission of Sensitive Information (CVE-2020-6997)

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Moxa EDS-G516E and EDS-510E Series Ethernet Switches Weak Password Requirements (CVE-2020-6991)

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Moxa EDS-G516E and EDS-510E series weak password vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

Moxa EDS-G516E and EDS-510E series weak cryptographic algorithm vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

Moxa EDS-G516E and EDS-510E series hard-coded vulnerabilities

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A hard-coded vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to recover confidential data...

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the lack of restrictions on excessive authentication attempts, allowing a hacker to gain full access to the system.

The vulnerability of the microprogramming software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the lack of restrictions on excessive authentication attempts. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full access to the system by brute-forcing the...

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches, which is related to the default use of the HTTP protocol, allows attackers to intercept administrator credentials and other confidential information, thereby gaining access to the control system.

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches is related to the default use of the HTTP protocol in implementing the “Basic HTTP Authentication” method. Exploiting this vulnerability allows a malicious actor to remotely intercept administrator...

PT-2017-3790

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E affected versions not specified Moxa EDS-510E affected versions not specified Description The issue is related to the use of an unstable cryptographic algorithm in configuration files. This could allow a remote attacker to gain...

PT-2017-3793

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to the use of hardcoded credentials in the firmware of Moxa EDS-G516E and Moxa EDS-510E switches. An attacker may exploi...

PT-2017-3789

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series firmware version 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the stack of the embedded web server in the firmware of Moxa EDS-G516E and Moxa EDS-510E...

PT-2017-3799

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series firmware versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to weak password requirements, which may allow an attacker to gain access using brute force. This can enable a...

PT-2017-3795

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the UDPmessageSetting component of the embedded web server in the firmware of Moxa EDS-G516E and Moxa EDS-510E switches...

PT-2017-3797

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the PTPSettingEnable component of the embedded web server in the firmware of Moxa EDS-G516E and Moxa EDS-510E switches...

PT-2017-3792

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to the use of a hard-coded cryptographic key in the configuration file of the affected products. This increases the...

PT-2017-3794

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E affected versions not specified Description The issue is related to a buffer overflow in the stack of the dot1xRadiusServerSetting function of the embedded web server in the firmware of Moxa EDS-G516E and Moxa...

PT-2017-3796

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E and Moxa EDS-510E versions affected versions not specified Moxa PT-7528 series firmware versions prior to 4.1 Moxa PT-7828 series firmware versions prior to 3.10 Description The issue is related to a buffer overflow in the web...

PT-2017-3791

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series versions 5.2 and earlier Moxa EDS-510E affected versions not specified Description The issue is related to the use of a weak cryptographic algorithm in the firmware of the affected products. This weakness may allow an...

PT-2017-3798

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E versions 5.2 or lower Moxa EDS-510E affected versions not specified Description The issue is related to the use of the HTTP protocol by default in the implementation of the "Basic HTTP Authorization" method, which can allow a...