Critical ICSA-20-056-03 6 CVEs

Moxa PT-7528 and PT-7828 Series Ethernet Switches

Published Feb 25, 2020 · Updated Feb 25, 2020

Vendor: Moxa Product: PT-7528 Series Product: PT-7828 Series

Summary

Successful exploitation of these vulnerabilities could crash the device or allow access to sensitive information.

Vulnerabilities 6

Unscored —

CVE-2020-6983

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected …

Mar 24, 2020
Unscored —

CVE-2020-6985

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices…

Mar 24, 2020
Unscored —

CVE-2020-6987

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected …

Mar 24, 2020
Unscored —

CVE-2020-6989

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, a buffer over…

Mar 24, 2020
Unscored —

CVE-2020-6993

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker c…

Mar 24, 2020
Unscored —

CVE-2020-6995

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the applicati…

Mar 24, 2020

Revision history

2020-02-25 #1
ICSA-20-056-03 Moxa PT-7528 and PT-7828 Series Ethernet Switches

References

ICS Advisory ICSA-20-056-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-056-03
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B