PT-2020-19328 · Moxa · Moxa Eds-G516E Series

Published 2020-03-26 · Updated 2020-03-30 · CVE-2020-6999

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Moxa EDS-G516E Series firmware versions 5.2 or lower

Description The issue arises from some parameters in the setting pages not ensuring text is the correct size for its buffer. This can potentially lead to issues related to buffer handling.

Recommendations For Moxa EDS-G516E Series firmware versions 5.2 or lower, consider restricting access to the setting pages until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2020-6999

Affected Products

Moxa Eds-G516E Series

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-6999 · Security Note
• https://us-cert.gov/ics/advisories/icsa-20-056-04 · Patch
• https://osv.dev/vulnerability/CVE-2020-6999 · Vendor Advisory
• https://t.me/cvenotify/2191 · Telegram Post