EUVD-2015-6407

Malware in sbrugna...

EUVD-2015-6405

Malware in sbrugna...

GoAhead Embedded Web Server DoS

The vulnerability in the embedded web server software of GoAhead’s Ethernet switch microprogramming devices of the Moxa EDS-405A and Moxa EDS-408A series is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Microprogrammable Ethernet Switches Administrative Web Interface Privilege Escalation

The vulnerability of the administrative web interface of Microprogramming Software for Ethernet switches of the Moxa EDS-405A and Moxa EDS-408A series is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain...

Moxa EDS-405A Series Buffer Overflow

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series lies in the fact that the operation is performed outside the buffer on the stack during password verification. Exploiting this vulnerability allows a malicious actor to cause service failures or execute...

PT-2021-3776

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A series Ethernet switch software affected versions not specified Description The issue is related to a buffer overflow on the stack when checking passwords, which could allow a remote attacker to cause a denial of service or execu...

Moxa EDS-405A Series Buffer Overflow DoS

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure by sending HTTP GET requests to the vulnerable device...

Moxa Ethernet Switch DoS

The vulnerability of the microprogrammed Ethernet switch software from Moxa EDS-405A series exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures by sending HTTP GET requests to the vulnerable device...

PT-2019-4293

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A series Ethernet switch software affected versions not specified Description The issue exists due to insufficient input validation in the software. An attacker, acting remotely, can exploit this to cause a denial of service by...

PT-2019-4294

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A series Ethernet switch software affected versions not specified Description The issue is related to a buffer overflow in the software of Moxa EDS-405A series Ethernet switches. An attacker, acting remotely, can exploit this issue...

Moxa IKS and EDS ICSA-19-057-01 Multiple Security Vulnerabilities

Description Moxa IKS and EDS are prone to following security vulnerabilities: 1. A cross-site-scripting vulnerability 2. Multiple stack-based buffer-overflow vulnerabilities 3. A security vulnerability 4. An information disclosure vulnerability 5. A cross-site request-forgery vulnerability 6...

PT-2017-3772 · Moxa · Moxa Eds-405A +3

Name of the Vulnerable Software and Affected Versions: Moxa EDS-405A versions affected versions not specified Moxa EDS-408A versions affected versions not specified Moxa EDS-510A versions affected versions not specified Moxa IKS versions affected versions not specified Description: The issue is...

Cross site scripting

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

Code injection

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

CVE-2015-6465

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

CVE-2015-6466

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6466

CVE-2015-6466 is an XSS vulnerability in the Diagnosis Ping feature of the administrative web interface on Moxa EDS-405A/EDS-408A switches, exploitable via an unspecified field in firmware prior to 3.6. Affected devices run Moxa’s EDS-405A/EDS-408A series; CVSSv2 base score 4.3 (AV:N/AC:M/Au:N/C:...

CVE-2015-6464

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin...

CVE-2015-6466: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6465: Undefined Security Weakness

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...