PT-2017-3815
CVE-2020-6983
·
Publicado
2017-09-01
·
Atualizado
2020-03-26
Descrição por
CVSS 2.0
10
AltaMétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Moxa PT-7528 series firmware versions 4.0 and lower
Moxa PT-7828 series firmware versions 3.9 and lower
Description
The issue is related to the use of a hard-coded cryptographic key in the affected products, which increases the risk of confidential data recovery. This could potentially allow a remote attacker to elevate their privileges.
Recommendations
For Moxa PT-7528 series firmware versions 4.0 and lower, consider updating to a version higher than 4.0 to mitigate the risk.
For Moxa PT-7828 series firmware versions 3.9 and lower, consider updating to a version higher than 3.9 to mitigate the risk.
As a temporary workaround, consider restricting access to sensitive data and accounts until a patch is available.
Explorabilidade
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾