PT-2025-3693 · Moxa · Eds-405A Series+47

Published 2025-01-29 · Updated 2025-02-22 · CVE-2024-7695

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Multiple network switches (affected versions not specified)

Description The issue is caused by insufficient input validation, allowing data to be written to memory outside the bounds of the buffer. This could result in a denial-of-service attack. The vulnerability poses a significant remote threat if the affected products are exposed to publicly accessible networks, potentially disrupting operations by shutting down the affected systems.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2025-01107

CVE-2024-7695

Affected Products

Eds-405A Series

Eds-408A Series

Eds-505A Series

Eds-508A Series

Eds-510A Series

Eds-516A Series

Eds-518A Series

Eds-528E Series

Eds-608 Series

Eds-611 Series

Eds-616 Series

Eds-619 Series

Eds-G508E Series

Eds-G509 Series

Eds-G512E Series

Eds-G516E Series

Eds-P506E Series

Eds-P510A Series

Ics-G7526A Series

Ics-G7528A Series

Ics-G7748A Series

Ics-G7750A Series

Ics-G7752A Series

Ics-G7826A Series

Ics-G7828A Series

Ics-G7848A Series

Ics-G7850A Series

Ics-G7852A Series

Iks-6726A Series

Iks-6728A Series

Iks-G6524A Series

Iks-G6824A Series

Moxa Pt-G503

Moxa Pt-G510

Moxa Pt-7728

Moxa Pt-7828

Pt-7728

Pt-7728 Series

Pt-7828

Pt-7828 Series

Pt-G503 Series

Pt-G510 Series

Sds-3006 Series

Sds-3008 Series

Sds-3010 Series

Sds-3016 Series

Tn-G4500 Series

Tn-G6500 Series

References · 17

• https://nvd.nist.gov/vuln/detail/CVE-2024-7695 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switches · Vendor Advisory
• https://moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switches · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01107 · Security Note
• https://moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switches · Vendor Advisory
• https://twitter.com/CveFindCom/status/1884512156982394988 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1884518072175714385 · Twitter Post
• https://twitter.com/fletch_ai/status/1885599021391372348 · Twitter Post
• https://twitter.com/CVEnew/status/1884516394320159114 · Twitter Post
• https://t.me/cvedetector/16675 · Telegram Post
• https://t.me/cvenotify/112145 · Telegram Post
• https://t.me/cvenotify/108953 · Telegram Post
• https://twitter.com/Komodosec/status/1889147233398120631 · Twitter Post
• https://t.me/cvenotify/110333 · Telegram Post
• https://t.me/pentestingnews/55969 · Telegram Post