PT-2017-12661 · Moxa · Mrd-305-Din+3

Published 2017-08-25 · Updated 2019-10-09 · CVE-2017-12709

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MRD-305-DIN versions prior to 1.7.5.0 MRD-315 versions prior to 1.7.5.0 MRD-355 versions prior to 1.7.5.0 MRD-455 versions prior to 1.7.5.0

Description A Use of Hard-Coded Credentials issue was discovered, which could allow for unauthorized local low-privileged access to the device. The device utilizes hard-coded credentials.

Recommendations For MRD-305-DIN versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-315 versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-355 versions prior to 1.7.5.0, update to version 1.7.5.0 or later. For MRD-455 versions prior to 1.7.5.0, update to version 1.7.5.0 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2017-12709

Affected Products

Mrd-305-Din

Mrd-315

Mrd-355

Mrd-455

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-12709 · Security Note
• http://securityfocus.com/bid/100470 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-17-236-01 · Note