Lucene search
+L

77 matches found

CNVD
CNVD
added 2020/02/26 12:00 a.m.8 views

Moxa EDS-G516E and EDS-510E series weak cryptographic algorithm vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

7.5CVSS6.8AI score0.00973EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/26 12:00 a.m.7 views

Moxa EDS-G516E and EDS-510E series plaintext transfer vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A plaintext transfer vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

7.5CVSS6.8AI score0.00973EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/26 12:00 a.m.25 views

Moxa EDS-G516E and EDS-510E series weak password vulnerability

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by attackers to obtain sensitive information...

9.8CVSS6.9AI score0.01506EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/02/26 12:00 a.m.18 views

Moxa EDS-G516E and EDS-510E series buffer overflow vulnerability (CNVD-2020-13515)

Moxa EDS-G516E and EDS-510E series are both Ethernet switches manufactured by Moxa. A buffer overflow vulnerability exists in the Moxa EDS-G516E and EDS-510E series, which can be exploited by an attacker to execute arbitrary code or cause a denial of service...

10CVSS8.1AI score0.029EPSS
SaveExploits0References1
ICS
ICS
added 2020/02/25 12:00 a.m.75 views

Moxa EDS-G516E and EDS-510E Series Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G516E series, and EDS-510E series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...

10CVSS8.7AI score0.029EPSS
SaveExploits0References5
CNVD
CNVD
added 2019/12/20 12:00 a.m.8 views

Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Resource Management Error Vulnerability

Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches are Ethernet switches manufactured by Moxa. The Moxa EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches are vulnerable to a resource management error that can be exploited by an attacker to cause the target device to stop...

7.8CVSS6.9AI score0.01333EPSS
SaveExploits0References1
ICS
ICS
added 2019/12/19 12:00 a.m.77 views

Moxa EDS Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: EDS-G508E, EDS-G512E, and EDS-G516E Series Ethernet Switches Vulnerability: Uncontrolled Resource Consumption 2. RISK EVALUATION Successful exploitation of this vulnerability could...

7.8CVSS7.7AI score0.01333EPSS
SaveExploits0References5
CVE
CVE
added 2019/12/11 1:03 a.m.111 views

CVE-2019-19707

CVE-2019-19707 affects Moxa EDS-G508E, EDS-G512E, and EDS-G516E Ethernet Switches (firmware up to 6.0). The issue enables denial-of-service via PROFINET DCE-RPC endpoint discovery packets, stemming from uncontrolled resource consumption. Impact is DoS on affected devices, potentially taking them ...

7.8CVSS7.5AI score0.01333EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/12/11 1:03 a.m.51 views

CVE-2019-19707

On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices with firmware through 6.0, denial of service can occur via PROFINET DCE-RPC endpoint discovery packets...

7.5AI score0.01333EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.11 views

The vulnerability of the microprogramming software for Moxa EDS-G516E and Moxa EDS-510E switches lies in the use of a rigidly encrypted cryptographic key in the configuration file. This allows an intruder to gain unauthorized access to the protected information.

The vulnerability of the microprogramming software for Moxa EDS-G516E and Moxa EDS-510E switches lies in the use of a rigidly encrypted cryptographic key in the configuration file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

10CVSS5.5AI score0.01482EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.11 views

The vulnerability of the embedded web-server microprogramming software of Moxa EDS-G516E and Moxa EDS-510E switches allows a hacker to execute arbitrary code or cause malfunctions in the device’s functionality.

The vulnerability of the embedded web-server microprogramming software for Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure using a specially crafted...

10CVSS6.5AI score0.029EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.9 views

The vulnerability of the dot1xRadiusServerSetting function in the embedded web server of the Moxa EDS-G516E and Moxa EDS-510E microcontroller software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the dot1xRadiusServerSetting function in the embedded web server of the Moxa EDS-G516E and Moxa EDS-510E microcontroller software systems is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a...

10CVSS6.5AI score
SaveExploits0References1Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.13 views

The vulnerability of the microprogramming software for Moxa EDS-G516E and Moxa EDS-510E switches lies in the use of rigidly encoded account data, which allows attackers to escalate their privileges.

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches is related to the use of rigidly encoded account data. Exploiting this vulnerability can allow attackers to enhance their privileges...

8.4CVSS5.5AI score0.02271EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.23 views

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches, which is related to the default use of the HTTP protocol, allows attackers to intercept administrator credentials and other confidential information, thereby gaining access to the control system.

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches is related to the default use of the HTTP protocol in implementing the “Basic HTTP Authentication” method. Exploiting this vulnerability allows a malicious actor to remotely intercept administrator...

10CVSS5.5AI score0.00973EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.11 views

The vulnerability of the SwitchDHCPSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a perpetrator to cause service interruptions.

The vulnerability of the SwitchDHCPSetting component within the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures by modifying the...

7.8CVSS5.8AI score0.03498EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.10 views

The vulnerability of the microprogrammed software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the lack of restrictions on excessive authentication attempts, allowing a hacker to gain full access to the system.

The vulnerability of the microprogramming software of Moxa EDS-G516E and Moxa EDS-510E switches lies in the lack of restrictions on excessive authentication attempts. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain full access to the system by brute-forcing the...

10CVSS5.5AI score0.01506EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2019/09/25 12:00 a.m.10 views

The vulnerability of the PTPSettingEnable component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches allows a hacker to cause a service failure.

The vulnerability of the PTPSettingEnable component in the embedded web-server software of Moxa EDS-G516E and Moxa EDS-510E switches is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service interruptions by modifying the configuration file remote...

7.8CVSS5.9AI score
SaveExploits0References1Affected Software2
Rows per page
Query Builder