MOXA EDS-G512E 5.1 build 16072215 vulnerabilities
4 known CVE vulnerabilities in MOXA EDS-G512E 5.1 build 16072215, translated and rated.
- CVE-2017-13699High
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices regarding the password encryption method. This method can be retrieved from the firmware as the chall value is sent in cleartext as a POST parameter.
- CVE-2017-13698High
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices, allowing an attacker to extract public and private keys from the firmware image available on the MOXA website. These keys could be used against a production switch that has the default keys embedded.
- CVE-2017-13703High
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices that may lead to a denial of service.
- CVE-2017-13701Critical
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices regarding the storage of backup files. These files contain sensitive information insecurely, as passwords are stored without encryption and without salt for hashing.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS