The vulnerabilities of the microprogrammed Ethernet switch software from Moxa series, including EDR-810, EDR-8010, EDR-G902, EDR-G903, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900, are related to the use of weak security mechanisms. These vulnerabilities allow attackers to exploit them to gain increased privileges.

The vulnerabilities of the microprogrammed Ethernet switch software from Moxa series, including EDR-810, EDR-8010, EDR-G902, EDR-G903, EDR-G9004, EDR-G9010, EDG-G1002-BP, NAT-102, OnCell G4302-LTE4, and TN-4900, are related to the use of weak security mechanisms. Exploiting these vulnerabilities...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited to cause a denial of service by sending a "switch" message missing the required "MMEUES1APID"...

Open5GS 安全漏洞

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which can be exploited to cause a denial of service by an attacker who sends a "Switch Request ACK" message missing th...

PT-2025-1407 · Open5Gs · Open5Gs Mme

Name of the Vulnerable Software and Affected Versions: Open5GS MME versions = 2.6.4 Description: The issue concerns an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a Path Switch Request message missing a required MME UE S1AP I...

CVE-2024-57013

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg...

CVE-2024-12297 Frontend Authorization Logic Disclosure Vulnerability

Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable...

CVE-2024-12297

CVE-2024-12297 affects multiple Moxa devices where an authentication bypass arises from flaws in the authorization mechanism. Public sources detail vulnerable components including various Moxa PT switches (examples: PT-508/510/7528/7728/7828 series and PT-G503/G510/G7728/G7828 series) with specif...

CVE-2024-57013

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "switch" parameter in setScheduleCfg...

CVE-2024-57013

CVE-2024-57013 concerns TOTOLINK X5000R devices. The TOTOLINK X5000R firmware version V9.1.0cu.2350_B20230313 is reported to contain an OS command injection vulnerability in the setScheduleCfg function, caused by improper handling/filtering of the switch parameter (constructor command characters)...

PT-2025-1115

Name of the Vulnerable Software and Affected Versions Moxa EDS-508A Series versions 3.11 and earlier Description The Moxa EDS-508A Series Ethernet switch is vulnerable to an authentication bypass due to flaws in its authorization mechanism. Although both client-side and back-end server verificati...

CVE-2025-21334

Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability...

CVE-2025-22134

A flaw was found in Vim. Due to Vim not properly terminating visual mode, a heap buffer overflow condition may be triggered when a user switches buffers using the :all command. This issue may lead to unexpected behavior, such as an application crash or memory corruption...

The vulnerability of the switch network firewall for HPE CX 10000 corporate networks allows a intruder to disclose protected information.

The vulnerability of the switch network firewalls for HPE CX 10000 corporate networks is related to insufficient protection of operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2024-55639

In the Linux kernel, the following vulnerability has been resolved: net: renesas: rswitch: avoid use-after-put for a device tree node The device tree node saved in the rswitchdevice structure is used at several driver locations. So passing this node to ofnodeput after the first use is wrong. Move...

Hewlett Packard Enterprise CX 10000 安全漏洞

The Hewlett Packard Enterprise CX 10000 HPE CX 10000 is a series of switches from Hewlett Packard Enterprise USA. A security vulnerability exists in the Hewlett Packard Enterprise CX 10000 that stems from a firewall component that allows an unauthenticated adjacent attacker to perform packet...

PT-2026-4365

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel has a flaw in the handling of references for DSA Distributed Switch Architecture conduits and their associated kobjects. Specifically, the OF Device Tree path does not...

PT-2025-34431

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a flaw in the cpu switch to and call on irq stack functions related to stack manipulation and the Shadow Call Stack. Interruptions during stack changes can le...

PT-2025-40085

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc1+ Description An issue exists in the Linux kernel related to incorrect IRQ freeing within the i40e network driver. Specifically, when request irq fails during the i40e vsi request irq msix function, the...

SUSE CVE-2024-56717

In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRCPORT field in ocelotifhsetbasic Packets injected by the CPU should have a SRCPORT field equal to the CPU port module index in the Analyzer block ocelot-numphysports. The blamed commit copie...

CVE-2024-56743

CVE-2024-56743 affects the Linux kernel NFS path. The issue arises from holding RCU while calling nfsd_file_put_local; the RCU hold is moved from nfs_to_nfsd_file_put_local to nfs_to_nfsd_net_put, with the rcu-protective call nfsd_serv_put being the one that requires RCU. This change addresses a ...