Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EDS-508A Series
Vendor
Moxa
Product
EDS-508A Series
Platforms
Unknown
Default status
unaffected
EDS-508A Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.11
None listed
PT-508 Series
Vendor
Moxa
Product
PT-508 Series
Platforms
Unknown
Default status
unaffected
PT-508 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.8
None listed
PT-510 Series
Vendor
Moxa
Product
PT-510 Series
Platforms
Unknown
Default status
unaffected
PT-510 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.8
None listed
PT-7528 Series
Vendor
Moxa
Product
PT-7528 Series
Platforms
Unknown
Default status
unaffected
PT-7528 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
5.0
None listed
PT-7728 Series
Vendor
Moxa
Product
PT-7728 Series
Platforms
Unknown
Default status
unaffected
PT-7728 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.9
None listed
PT-7828 Series
Vendor
Moxa
Product
PT-7828 Series
Platforms
Unknown
Default status
unaffected
PT-7828 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
4.0
None listed
PT-G503 Series
Vendor
Moxa
Product
PT-G503 Series
Platforms
Unknown
Default status
unaffected
PT-G503 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
5.3
None listed
PT-G510 Series
Vendor
Moxa
Product
PT-G510 Series
Platforms
Unknown
Default status
unaffected
PT-G510 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
6.5
None listed
PT-G7728 Series
Vendor
Moxa
Product
PT-G7728 Series
Platforms
Unknown
Default status
unaffected
PT-G7728 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
6.5
None listed
PT-G7828 Series
Vendor
Moxa
Product
PT-G7828 Series
Platforms
Unknown
Default status
unaffected
PT-G7828 Series · Scoped product and version facts