Moxa PT-7528 and PT-7828 Series Ethernet Switches

1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Moxa Equipment: PT-7528 Series and PT-7828 Series Vulnerabilities: Stack-based Buffer Overflow, Use of a Broken or Risky Cryptographic Algorithm, Use of Hard-coded Cryptographic Key, Use of...

PT-2020-7524

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: A previously reported issue was withdrawn by its CNA after further investigation showed it was not a security issue. Recommendations: At the moment, there is no information...

PT-2020-7551

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The candidate number was withdrawn by its CNA as it was not a security issue. Recommendations: At the moment, there is no information about a newer version that contains a fi...

PT-2020-7097

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A previously considered issue was withdrawn by its CNA after further investigation showed it was not a security issue. Recommendations At the moment, there is no information...

PT-2019-7038 · Foreman · Foreman

Name of the Vulnerable Software and Affected Versions: Foreman affected versions not specified Description: The issue is related to improper input validation, which could lead to a partial Denial of Service. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2019-20544

The security team is marking this project unsupported. There is a known security issue with the project that has not been fixed by the maintainer. If you would like to maintain this project, please read:...

QIWI: [qiwi.me] Stored XSS

Stored XSS with WAF bypass in "wishlist" functionality Хранимая ХСС в функционале вишлистов с обходом встроенного WAF. https://twitter.com/ptswarm...

QIWI: IDOR редактирование любого вишлиста

The Piggybox service had the ability to edit other people's wishlists using a specially formed request. В копилке существовала возможность редактировать чужие вишлисты с помощью специально сформированного запроса. https://twitter.com/ptswarm...

PT-2019-4228

Name of the Vulnerable Software and Affected Versions Microsoft Windows AppX Deployment Server affected versions not specified Description The issue is related to insufficient access restrictions in the Windows AppX Deployment Server component, allowing an attacker to elevate their privileges. To...

vasp.pt Open Redirect vulnerability

Open Bug Bounty ID: OBB-1013613 Security Researcher Gh05tPT Helped patch 6899 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting vasp.pt website and its...

PT-2019-05: Local privilege escalation

...

PT-2019-15477

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description The candidate number has been withdrawn by its CNA. No further information is available about the issue. Recommendations At the moment, there is no information about a newer...

PT-2019-8557

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to not being associated with any vulnerability during 2017. Recommendations At the moment, there is no information about a newer version tha...

PT-2019-6340 · Imagemagick +5 · Imagemagick +5

Name of the Vulnerable Software and Affected Versions: ImageMagick versions prior to 7.0.9-0 Description: The issue is related to the ParseMetaGeometry function in the MagickCore/geometry.c component of the ImageMagick console graphic editor. It is caused by an incorrect implementation of the...

The vulnerability of the embedded web-server microprogramming software in Moxa PT-7528 and Moxa PT-7828 Ethernet switches allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the embedded web-server microprogramming software for Moxa PT-7528 and Moxa PT-7828 switches is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or trigger a service failure using a specially crafted...

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of a unstable cryptographic algorithm in the configuration files. This allows a hacker to decrypt the configuration data.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of a unstable cryptographic algorithm in the configuration files. Exploiting this vulnerability allows a remote attacker to decrypt the configuration data...

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of rigidly encoded configuration data for the device’s console. This allows attackers to exploit their privileges to gain unauthorized access.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of rigidly encoded configuration data for the device’s configuration console. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of cryptographic algorithms that contain defects, allowing attackers to decrypt the login credentials.

The vulnerability of the microprogrammed Ethernet switches Moxa PT-7528 and Moxa PT-7828 lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability allows a remote attacker to decrypt the login credentials...

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of a rigidly encrypted cryptographic key for encrypting account data. This allows attackers to enhance their privileges.

The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the use of a rigidly encrypted cryptographic key, which is used for encrypting account data. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

PT-2019-7047

Name of the Vulnerable Software and Affected Versions No vulnerable software or affected versions specified. Description A candidate number was rejected due to being in a CNA pool not assigned to any issues during 2014. Recommendations At the moment, there is no information about a newer version...