CVE-2020-6987

CVE-2020-6987 affects Moxa PT-7528 (firmware ≤4.0) and PT-7828 (firmware ≤3.9) Ethernet switches. The vulnerability is a weak cryptographic algorithm that may disclose confidential information. The issue is documented with CVSSv3.1 base score 7.5 (Network attack, no privileges, high confidentiali...

CVE-2020-6983

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered...

CVE-2020-6983

CVE-2020-6983 affects Moxa PT-7528 series (firmware version 4.0 or lower) and PT-7828 series (version 3.9 or lower). The root cause is a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered. The issue is documented with high impact (confidentiality...

CVE-2020-6989

The CVE-2020-6989 entry concerns Moxa PT-7528 series (firmware 4.0 or lower) and PT-7828 series (firmware 3.9 or lower). The vulnerability is a stack-based buffer overflow in the device web server that enables a remote attacker to cause a denial-of-service or to execute arbitrary code. Connected ...

CVE-2020-6989

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code...

CVE-2020-6985: Use of Hard-coded Credentials

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console...

CVE-2020-6995: Weak Password Requirements

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access...

CVE-2020-6989: Stack-based Buffer Overflow

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer overflow in the web server allows remote attackers to cause a denial-of-service condition or execute arbitrary code...

CVE-2020-6987: Use of a Broken or Risky Cryptographic Algorithm

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed...

CVE-2020-6983: Use of Hard-coded Cryptographic Key

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a hard-coded cryptographic key, which increases the possibility that confidential data can be recovered...

CVE-2020-6993: Exposure of Sensitive Information to an Unauthorized Actor

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization...

cintramedica.pt Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1119398 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cintramedica.pt website an...

PT-2020-8520

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A previously reported issue was investigated and found not to be a security issue. The candidate number associated with this report was withdrawn. Recommendations: At the...

PT-2020-9348

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A previously reported issue was investigated and found not to be a security issue. The candidate number associated with this report was withdrawn. Recommendations: At the...

Moxa PT-7528 and PT-7828 Series Hardcoding Vulnerabilities

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A hard-coded vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to recover confidential data...

Moxa PT-7528 and PT-7828 Series Hard Credential Vulnerability

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A hard credential vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to obtain sensitive information...

Moxa PT-7528 and PT-7828 Series Weak Password Vulnerability

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak password vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by an attacker to gain unauthorized access to the system...

Moxa PT-7528 and PT-7828 Series Information Disclosure Vulnerability

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. An information disclosure vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by attackers to obtain sensitive information...

Moxa PT-7528 and PT-7828 Series Weak Cryptographic Algorithm Vulnerability

Moxa PT-7528 and PT-7828 Series are both Ethernet switches manufactured by Moxa. A weak cryptographic algorithm vulnerability exists in the Moxa PT-7528 and PT-7828 Series, which can be exploited by attackers to obtain sensitive information...

PT-2020-9852

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2019. Recommendations At the moment, there is no information about a newer version...