PT-2015-3453 · Embedthis+1 · Goahead Web Server+2

Publicado 2015-09-03 · Atualizado 2016-12-22 · CVE-2015-6465

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and Moxa EDS-408A switches with firmware prior to 3.6

Description The issue is related to an uncontrolled resource consumption in the GoAhead web server of the affected switches. This can be exploited by a remote attacker to cause a denial of service, potentially leading to a reboot of the device.

Recommendations For Moxa EDS-405A and Moxa EDS-408A switches with firmware prior to 3.6, update the firmware to version 3.6 or later to resolve the issue.

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

BDU:2024-05173

CVE-2015-6465

Produtos afetados

Goahead Web Server

Moxa Eds-405A

Moxa Eds-408A

Referências · 6

• https://bdu.fstec.ru/vul/2024-05173 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-6465 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03 · Nota
• http://moxa.com/support/download.aspx?type=support&id=328 · Correção
• http://securitytracker.com/id/1033543 · Nota
• https://moxa.com/en/support/product-support/security-advisory/mpsa-154603-eds-405a-408a-series-multiple-web-vulnerabilities · Nota