10 matches found
Moxa EDS-G512E Cross-site Scripting (CVE-2017-13700)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Moxa EDS-G512E improper cookie management (CVE-2017-13702)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
MOXA EDS-G512E Information Disclosure Vulnerability (CNVD-2017-37713)
The MOXA EDS-G512E is a Gigabit Ethernet managed switch. An information disclosure vulnerability exists in MOXA EDS-G512E 5.1 build 16072215. An attacker can exploit this vulnerability to obtain sensitive information...
CVE-2017-13701: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method...
CVE-2017-13698: Undefined Security Weakness
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image available on the MOXA website and could use them against a production switch that has the default keys embedded...
MOXA EDS-G512E Denial of Service Vulnerability
Moxa EDS-G512E is an Ethernet switch device from Moxa. A security vulnerability exists in the MOXA EDS-G512E version 5.1 build 16072215. An attacker can exploit this vulnerability to cause a denial of service...
MOXA EDS-G512E Information Disclosure Vulnerability
Moxa EDS-G512E is an Ethernet switch device from Moxa. A security vulnerability exists in the MOXA EDS-G512E version 5.1 build 16072215. An attacker can exploit the vulnerability to steal, manipulate, and reuse cookies...
MOXA EDS-G512E Cross-Site Scripting Vulnerability
Moxa EDS-G512E is an Ethernet switch device from Moxa. A cross-site scripting vulnerability exists in the management interface of the MOXA EDS-G512E version 5.1 build 16072215. A remote attacker can exploit this vulnerability to inject malicious code...
