CVE-2022-32536

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...

The vulnerability of Moxa’s Ethernet switch microprogramming software lies in the fact that the operation output goes beyond the buffer in memory, allowing a hacker to trigger a service failure.

The vulnerability of Moxa’s Ethernet switch microprogramming software lies in the fact that the operation output escapes the buffer boundaries and enters memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerabilities of the microprogrammed Ethernet switch software from Moxa series, including EDR-810, EDR-8010, EDR-G902, EDR-G903, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900, are related to the use of weak security mechanisms. These vulnerabilities allow attackers to exploit them to gain increased privileges.

The vulnerabilities of the microprogrammed Ethernet switch software from Moxa series, including EDR-810, EDR-8010, EDR-G902, EDR-G903, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900, are related to the use of weak security mechanisms. Exploiting these vulnerabilities...

CVE-2024-12297 Frontend Authorization Logic Disclosure Vulnerability

Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable...

CVE-2024-12297

CVE-2024-12297 affects multiple Moxa devices where an authentication bypass arises from flaws in the authorization mechanism. Public sources detail vulnerable components including various Moxa PT switches (examples: PT-508/510/7528/7728/7828 series and PT-G503/G510/G7728/G7828 series) with specif...

PT-2025-1115

Name of the Vulnerable Software and Affected Versions Moxa EDS-508A Series versions 3.11 and earlier Description The Moxa EDS-508A Series Ethernet switch is vulnerable to an authentication bypass due to flaws in its authorization mechanism. Although both client-side and back-end server verificati...

The vulnerability in the web interface for managing Ethernet switches of Palo Alto Networks, which is controlled by the PAN-OS operating system, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Web interface for managing Ethernet switches in Palo Alto Networks, which is controlled by the PAN-OS operating system, stems from the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a...

The vulnerability of the microprogrammed Ethernet switch software from Moxa series, namely EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, G4302-LTE4, and TN-4900, arises due to the lack of measures taken to neutralize specific components used in the operating system. This vulnerability allows a perpetrator to execute arbitrary code.

The vulnerability of the microprogrammed Ethernet switch software from Moxa series, such as EDR-8010, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, G4302-LTE4, and TN-4900, exists due to the lack of measures to neutralize specific components. Exploiting this vulnerability allows a remote attacker ...

Rockwell Automation Stratix Industrial Managed Ethernet Switch 7Pk Errors (CVE-2018-0155)

A vulnerability in the Bidirectional Forwarding Detection BFD offload implementation could allow an unauthenticated remote attacker to cause a crash of the iosd process, causing a DoS condition. The vulnerability is due to insufficient error handling when the BFD header in a BFD packet is...

The vulnerability of Moxa PT-G503 Ethernet switches’ microprogramming software lies in the use of cookies to store confidential information without the HttpOnly flag. This allows attackers to gain unauthorized access to the protected information.

The vulnerability of Moxa PT-G503 Ethernet switches’ microprogramming software is related to the use of cookies for storing confidential information without the HttpOnly flag. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS allows a hacker to send arbitrary packets into the mirrored network.

The vulnerability of the microprogrammed Ethernet switch software from RUGGEDCOM ROS is related to errors in representing certain functions. Exploiting this vulnerability allows a remote attacker to send arbitrary packets to the mirrored network...

The vulnerability of the microprogrammed Ethernet switches Moxa SDS-3008 lies in the insufficient protection of the web page structure, allowing attackers to execute arbitrary JavaScript code.

The vulnerability of the microprogrammed Ethernet switches from Moxa, the SDS-3008 model, is related to insufficient protection of the website structure when processing the Switch Description field in the Switch Information section. Exploiting this vulnerability allows an attacker to execute...

CVE-2022-41313

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41312

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-41311

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

CVE-2022-40691

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-40224

A denial of service vulnerability exists in the web server functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP message header can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

CVE-2022-40693

A cleartext transmission vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted network sniffing can lead to a disclosure of sensitive information. An attacker can sniff network traffic to trigger this vulnerability...

CVE-2022-41311

A stored cross-site scripting vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to arbitrary Javascript execution. An attacker can send an HTTP request to trigger this vulnerability.Form fiel...

Information disclosure

An information disclosure vulnerability exists in the web application functionality of Moxa SDS-3008 Series Industrial Ethernet Switch 2.1. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send an HTTP request to trigger this vulnerability...