310 matches found
CVE-2017-13701
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method...
Design/Logic Flaw
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent in cleartext as a POST parameter. An attacker could reverse the password encryption algorithm to...
CVE-2017-13701
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method...
CVE-2017-13701
Affected product: MOXA EDS-G512E (5.1 build 16072215). Issue: backup files store passwords without salt and with an insecure, timestamped ciphering method, enabling exposure of credentials. Impact: high confidentiality and integrity concerns; CVSS-3.0 base score 9.8 (CRITICAL), network attack vec...
CVE-2017-13699
CVE-2017-13699 affects MOXA EDS-G512E (5.1 build 16072215). The password encryption is retrievable from the firmware; the encryption is based on a cleartext chall value sent via POST. An attacker could reverse the password encryption algorithm to obtain it, exposing credentials. No exploitation d...
CVE-2017-13699
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent in cleartext as a POST parameter. An attacker could reverse the password encryption algorithm to...
CVE-2017-13698
The CVE-2017-13698 entry concerns MOXA EDS-G512E devices (firmware 5.1 build 16072215). A vulnerability allows extracting public and private keys from the firmware image published by MOXA, which could be used against production switches that have embedded default keys. The connected sources (incl...
MOXA EDS-G512E Information Disclosure Vulnerability
Moxa EDS-G512E is an Ethernet switch device from Moxa. A security vulnerability exists in the MOXA EDS-G512E version 5.1 build 16072215. An attacker can exploit the vulnerability to steal, manipulate, and reuse cookies...
MOXA EDS-G512E Denial of Service Vulnerability
Moxa EDS-G512E is an Ethernet switch device from Moxa. A security vulnerability exists in the MOXA EDS-G512E version 5.1 build 16072215. An attacker can exploit this vulnerability to cause a denial of service...
MOXA EDS-G512E Cross-Site Scripting Vulnerability
Moxa EDS-G512E is an Ethernet switch device from Moxa. A cross-site scripting vulnerability exists in the management interface of the MOXA EDS-G512E version 5.1 build 16072215. A remote attacker can exploit this vulnerability to inject malicious code...
Denial of service
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur...
Design/Logic Flaw
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused...
CVE-2017-13700
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface...
CVE-2017-13703
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur...
CVE-2017-13702
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused...
CVE-2017-13702
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused...
CVE-2017-13703
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur...
Design/Logic Flaw
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface...