PT-2017-13026
CVE-2017-13698
·
Publicado
2017-11-23
·
Atualizado
2019-10-03
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
MOXA EDS-G512E version 5.1 build 16072215
Description
An issue allows an attacker to extract public and private keys from the firmware image available on the MOXA website. These keys can then be used against a production switch that has the default keys embedded.
Recommendations
For MOXA EDS-G512E version 5.1 build 16072215, consider changing the default keys to custom keys to prevent exploitation. As a temporary workaround, restrict access to the device to minimize the risk of unauthorized key usage.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾