PT-2015-3453 · Embedthis+1 · Goahead Web Server+2

Published 2015-09-03 · Updated 2016-12-22 · CVE-2015-6465

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Moxa EDS-405A and Moxa EDS-408A switches with firmware prior to 3.6

Description The issue is related to an uncontrolled resource consumption in the GoAhead web server of the affected switches. This can be exploited by a remote attacker to cause a denial of service, potentially leading to a reboot of the device.

Recommendations For Moxa EDS-405A and Moxa EDS-408A switches with firmware prior to 3.6, update the firmware to version 3.6 or later to resolve the issue.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2024-05173

CVE-2015-6465

Affected Products

Goahead Web Server

Moxa Eds-405A

Moxa Eds-408A

References · 6

• https://bdu.fstec.ru/vul/2024-05173 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-6465 · Security Note
• http://moxa.com/support/download.aspx?type=support&id=328 · Patch
• https://ics-cert.us-cert.gov/advisories/ICSA-15-246-03 · Note
• http://securitytracker.com/id/1033543 · Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-154603-eds-405a-408a-series-multiple-web-vulnerabilities · Note