Moxa Eds-g512e Firmware vulnerabilities

7 CVEs affecting Moxa Eds-g512e Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-19707, published 2019-12-11.

More from Moxa.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-13701, published 2017-11-23. Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days. An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are…
• CVE-2017-13698, published 2017-11-23. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image available on the MOXA website and could use them…
• CVE-2019-19707, published 2019-12-11. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint discovery packets.
• CVE-2017-13703, published 2017-11-17. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur.
• CVE-2017-13702, published 2017-11-17. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. Cookies can be stolen, manipulated, and reused.
• CVE-2017-13700, published 2017-11-17. Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days. An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. There is XSS in the administration interface.
• CVE-2017-13699, published 2017-11-23. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The password encryption method can be retrieved from the firmware. This encryption method is based on a chall value that is sent…