EUVD-2015-6407

Malware in sbrugna...

EUVD-2015-6405

Malware in sbrugna...

The vulnerability in the embedded web server software of GoAhead’s Ethernet switch microprogramming systems of the Moxa EDS-405A and Moxa EDS-408A series allows a intruder to cause service interruptions.

The vulnerability in the embedded web server software of GoAhead’s Ethernet switch microprogramming devices of the Moxa EDS-405A and Moxa EDS-408A series is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the administrative web interface of the Microprogrammable Ethernet switches from the Moxa EDS-405A and Moxa EDS-408A series allows attackers to circumvent security restrictions and gain increased privileges.

The vulnerability of the administrative web interface of Microprogramming Software for Ethernet switches of the Moxa EDS-405A and Moxa EDS-408A series is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain...

Moxa IKS and EDS ICSA-19-057-01 Multiple Security Vulnerabilities

Description Moxa IKS and EDS are prone to following security vulnerabilities: 1. A cross-site-scripting vulnerability 2. Multiple stack-based buffer-overflow vulnerabilities 3. A security vulnerability 4. An information disclosure vulnerability 5. A cross-site request-forgery vulnerability 6...

PT-2017-3772 · Moxa · Moxa Eds-405A +3

Name of the Vulnerable Software and Affected Versions: Moxa EDS-405A versions affected versions not specified Moxa EDS-408A versions affected versions not specified Moxa EDS-510A versions affected versions not specified Moxa IKS versions affected versions not specified Description: The issue is...

Code injection

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6466

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6465

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

CVE-2015-6464

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin...

CVE-2015-6466

CVE-2015-6466 is an XSS vulnerability in the Diagnosis Ping feature of the administrative web interface on Moxa EDS-405A/EDS-408A switches, exploitable via an unspecified field in firmware prior to 3.6. Affected devices run Moxa’s EDS-405A/EDS-408A series; CVSSv2 base score 4.3 (AV:N/AC:M/Au:N/C:...

CVE-2015-6464: Undefined Security Weakness

The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass a read-only protection mechanism by using Firefox with a web-developer plugin...

CVE-2015-6466: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote attackers to inject arbitrary web script or HTML via an unspecified field...

CVE-2015-6465: Undefined Security Weakness

The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial of service reboot via a crafted URL...

Moxa Industrial Managed Switch Cross-Site Scripting Vulnerability

Moxa EDS-405A/EDS-408A is a series of Ethernet switches. A cross-site scripting vulnerability exists in the embedded management web interface of the Moxa EDS-405A/EDS-408A, which can be exploited by remote attackers to inject arbitrary JS code...

Moxa Industrial Managed Switch Elevation of Privilege Vulnerability

Moxa EDS-405A/EDS-408A is a series of Ethernet switches. An elevation of privilege vulnerability exists in the management web interface of the Moxa EDS-405A/EDS-408A, which can be exploited by an attacker to bypass the authentication mechanism and elevate privileges...

PT-2015-3453

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and Moxa EDS-408A switches with firmware prior to 3.6 Description The issue is related to an uncontrolled resource consumption in the GoAhead web server of the affected switches. This can be exploited by a remote attacker to caus...

PT-2015-3454

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and EDS-408A switches with firmware prior to 3.6 Description The administrative web interface of the affected switches has a flaw in access control, allowing remote authenticated users to bypass a read-only protection mechanism...

PT-2015-3452

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and Moxa EDS-408A versions prior to 3.6 Description The issue is related to insufficient protection of the web page structure in the Diagnosis Ping feature of the administrative web interface. This can be exploited by a remote...