Moxa EDS Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could...

CVE-2019-19707

CVE-2019-19707 affects Moxa EDS-G508E, EDS-G512E, and EDS-G516E Ethernet Switches (firmware up to 6.0). The issue enables denial-of-service via PROFINET DCE-RPC endpoint discovery packets, stemming from uncontrolled resource consumption. Impact is DoS on affected devices, potentially taking them ...

CVE-2019-19707

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...

The vulnerability of Moxa EDS-810 microcontroller-based web consoles arises from insufficient checking of input data, allowing attackers to execute arbitrary commands.

The vulnerability of Moxa EDS-810 microcontroller-based web consoles exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of Moxa EDS-810 microcontroller software, related to access control deficiencies, allows a intruder to disclose protected information.

The vulnerability of Moxa EDS-810 microcontroller-based software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information using specially crafted queries...

The vulnerability of the dot1xRadiusServerSetting function in the embedded web server of the Moxa EDS-G516E and Moxa EDS-510E microcontroller software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the dot1xRadiusServerSetting function in the embedded web server of the Moxa EDS-G516E and Moxa EDS-510E microcontroller software systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a...

The vulnerability of the SwitchDHCPSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a perpetrator to cause service interruptions.

The vulnerability of the SwitchDHCPSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures by modifying the...

The vulnerability of the PTPSettingEnable component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a hacker to cause a service failure.

The vulnerability of the PTPSettingEnable component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions by modifying the configuration file remote...

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches, which is related to the default use of the HTTP protocol, allows attackers to intercept administrator credentials and other confidential information, thereby gaining access to the control system.

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches is related to the default use of the HTTP protocol in implementing the “Basic HTTP Authentication” method. Exploiting this vulnerability allows a malicious actor to remotely intercept administrator...

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the lack of restrictions on excessive authentication attempts, allowing a hacker to gain full access to the system.

The vulnerability of the microprogramming software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the lack of restrictions on excessive authentication attempts. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full access to the system by brute-forcing the...

Denial of Service Vulnerability in MOXA EtherDevice Switch EDS Series Switches

MOXA EtherDevice Switch EDS series is a series of industrial switches introduced by Moxa. A denial of service vulnerability exists in the MOXA EtherDevice Switch EDS Series switches. An attacker could exploit this vulnerability to cause a denial of service...

Denial of Service Vulnerability in MOXA EDS-405A Industrial Switch

The EDS-405A/408A series are 5-port and 8-port entry-level managed Ethernet switches designed for industrial applications. A denial-of-service vulnerability exists in the MOXA EDS-405A industrial switches, which can be exploited by an attacker to construct a special data message that can cause th...

Moxa Switch EDS-405A Detection

Binary data 764385.prm...

Moxa Switch EDS-408A Detection

Binary data 764386.prm...

Moxa Switch EDS-510A Detection

Binary data 764387.prm...

CVE-2019-6526

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative...

CVE-2019-6526

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative...

Default credentials

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative...

CVE-2019-6526

CVE-2019-6526 affects Moxa IKS-G6824A (v5.6 and prior) and EDS-405A/408A/510A (v3.8 and prior). The root cause is plaintext transmission of sensitive data, enabling potential capture of credentials such as an administrative password. Remediation per sources: apply firmware patches and consider co...

CVE-2019-6526

Moxa IKS-G6824A series Versions 4.5 and prior, EDS-405A series Version 3.8 and prior, EDS-408A series Version 3.8 and prior, and EDS-510A series Version 3.8 and prior use plaintext transmission of sensitive data, which may allow an attacker to capture sensitive data such as an administrative...