CVE-2017-13703
HighSummary
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices that may lead to a denial of service.
Risk Assessment
Denial of service may affect the availability of devices, potentially disrupting network operations.
Recommendation
It is recommended to update the device firmware to the latest version to minimize the risk of this issue.
Other vulnerabilities in MOXA EDS-G512E 5.1 build 16072215
See all- CVE-2017-13699High
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices regarding the password encryption method. This method can be retrieved from the firmware as the chall value is sent in cleartext as a POST parameter.
- CVE-2017-13698High
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices, allowing an attacker to extract public and private keys from the firmware image available on the MOXA website. These keys could be used against a production switch that has the default keys embedded.
- CVE-2017-13701Critical
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices regarding the storage of backup files. These files contain sensitive information insecurely, as passwords are stored without encryption and without salt for hashing.
Original NVD description (English source)
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. A denial of service may occur.