PT-2017-8783 · Moxa · Mrd-305-Din+3

Mandar Jadhav · Publicado 2017-08-25 · Atualizado 2017-08-30 · CVE-2016-5816

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MRD-305-DIN versions prior to 1.7.5.0 MRD-315 versions prior to 1.7.5.0 MRD-355 versions prior to 1.7.5.0 MRD-455 versions prior to 1.7.5.0

Description A Use of Hard-Coded Cryptographic Key issue was discovered, where the device utilizes hard-coded private cryptographic keys. This may allow an attacker to decrypt traffic from any other source.

Recommendations For MRD-305-DIN versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-315 versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-355 versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-455 versions prior to 1.7.5.0, update to version 1.7.5.0 or later.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2016-5816

Produtos afetados

Mrd-305-Din

Mrd-315

Mrd-355

Mrd-455

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2016-5816 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01 · Nota