Critical ICSA-20-056-04 7 CVEs

Moxa EDS-G516E and EDS-510E Series Ethernet Switches

Published Feb 25, 2020 · Updated Feb 25, 2020

Vendor: Moxa Product: EDS-510E Series firmware Product: EDS-G516E Series firmware

Summary

Successful exploitation of these vulnerabilities could crash the device, execute arbitrary code, and allow access to sensitive information.

Vulnerabilities 7

Unscored —

CVE-2020-6979

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, incr…

Mar 24, 2020
Unscored —

CVE-2020-6981

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authe…

Mar 24, 2020
Unscored —

CVE-2020-6991

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain acces…

Mar 24, 2020
Unscored —

CVE-2020-6997

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web application…

Mar 24, 2020
Unscored —

CVE-2020-6999

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text…

Mar 26, 2020
Unscored —

CVE-2020-7001

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, whic…

Mar 24, 2020
Unscored —

CVE-2020-7007

In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device,…

Mar 24, 2020

Revision history

2020-02-25 #1
ICSA-20-056-04 Moxa EDS-G516E and EDS-510E Series Ethernet Switches

References

ICS Advisory ICSA-20-056-04 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-056-04
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B