PT-2025-1115 · Moxa · Moxa Eds-508A Series

Artem Turyshev · Published 2025-01-15 · Updated 2026-02-05 · CVE-2024-12297

Positive Technologies (AI Summary)

CVSS v4.0

9.2

Critical

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L

Name of the Vulnerable Software and Affected Versions Moxa EDS-508A Series versions 3.11 and earlier

Description The Moxa EDS-508A Series Ethernet switch is vulnerable to an authentication bypass due to flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.

Recommendations For Moxa EDS-508A Series versions 3.11 and earlier, a patch is available for affected devices. It is recommended to apply this patch to fix the vulnerability. As a temporary workaround, consider restricting access to the device and its network to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-656

Related Identifiers

BDU:2025-00371

CVE-2024-12297

Affected Products

Moxa Eds-508A Series

References · 27

• https://moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-12297 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-241408-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-identified-in-pt-switches · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-00371 · Security Note
• https://twitter.com/the_yellow_fall/status/1898915383148523899 · Twitter Post
• https://t.me/cvenotify/107437 · Telegram Post
• https://twitter.com/ThreatSynop/status/2019413136877445420 · Twitter Post
• https://twitter.com/samilaiho/status/1897899149422739969 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1880773292111564863 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1j8v5gt/moxa_addresses_critical_vulnerability_in_pt · Reddit Post
• https://twitter.com/syedaquib77/status/1898961527417581921 · Twitter Post
• https://twitter.com/threatsbank/status/1899360148067357048 · Twitter Post
• https://t.me/pentestingnews/55432 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1879495182313251240 · Twitter Post
• https://twitter.com/TheHackersNews/status/1899351677380993036 · Twitter Post