PT-2017-13026 · Moxa · Moxa Eds-G512E

Publicado 2017-11-23 · Atualizado 2019-10-03 · CVE-2017-13698

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MOXA EDS-G512E version 5.1 build 16072215

Description An issue allows an attacker to extract public and private keys from the firmware image available on the MOXA website. These keys can then be used against a production switch that has the default keys embedded.

Recommendations For MOXA EDS-G512E version 5.1 build 16072215, consider changing the default keys to custom keys to prevent exploitation. As a temporary workaround, restrict access to the device to minimize the risk of unauthorized key usage.

Correção

Identificadores relacionados

CVE-2017-13698

Produtos afetados

Moxa Eds-G512E

Referências · 3

• https://sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-13698 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-13698 · Aviso do Fabricante