Evgeniy Druzhinin

The issue concerns the storage of sensitive information in cleartext, potentially allowing access to attackers or low-privileged users.

The issue is related to five buffer overflows in the built-in web server of the Moxa NPort IAW5000A-I/O series. This may allow a remote attacker to initiate a denial-of-service attack and execute arbitrary code.

The issue is related to improper input validation in the built-in web server, which may allow a remote attacker to execute commands.

The issue allows data to be copied without validation in the built-in web server, potentially enabling a remote attacker to cause denial-of-service conditions.

The issue is related to two buffer overflows in the built-in web server, which may allow a remote attacker to cause a denial-of-service condition.

The issue could expose cleartext credentials if an authorized, privileged user creates a diagnostic memory dump of the process and saves it to a non-protected location.

The issue concerns improper privilege management in the built-in WEB server, potentially allowing an attacker with user privileges to perform requests with administrative privileges.

The issue concerns the built-in WEB server, which has incorrectly implemented protections from session fixation. This may allow an attacker to gain access to a session and hijack it by stealing the user's cookies.

The issue concerns the storage and transmission of credentials for third-party services in cleartext by the built-in WEB server. This affects the confidentiality of the credentials, as they can be easily intercepted or accessed.

A Missing Encryption of Sensitive Data issue exists, allowing an attacker to read network traffic over the HTTP protocol.

The issue is related to the lack of encryption for sensitive data in the firmware of the Easergy T300 RTU. This could allow a remote attacker to gain unauthorized access to network traffic over the HTTP protocol. The vulnerability may enable an attacker to read network traffic, potentially leading to further security issues.

The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform arbitrary actions. This is due to improper restriction of rendered UI layers or frames, allowing an attacker to trick a user into initiating an unintended action.

The issue is related to the implementation of SSH/Telnet protocols in the MOXA NPort IAW5000A-I/O Series web server software, which lacks sufficient restrictions on authentication attempts. This may allow a remote attacker to bypass security restrictions through brute force attacks.

The WebUI of the affected devices allows for plaintext transmission of user credentials by default, which can be done over HTTP.

The WebUI of the affected device is susceptible to a denial-of-service attack. This can be achieved by establishing more than 120 connections.

The WebUI of the affected devices leaks private information in firmware images.

The WebUI of the affected device is susceptible to brute-force attacks due to improper restriction of excessive authentication attempts. This allows attackers to attempt numerous login combinations without significant impediment.

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches (affected versions not specified) Description: A Cleartext Transmission of Sensitive Information issue was discovered in the web interface of the affected switches, which may allow an attacker to obtain sensitive information through a successful man-in-the-middle attack. The vulnerability can be exploited by a remote attacker to intercept sensitive information. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches (affected versions not specified) Description: A Session Fixation issue was discovered in the web interface of the affected switches, which may allow an attacker to hijack web sessions. The vulnerability is related to incorrect session management, potentially enabling a remote attacker to gain unauthorized access and intercept web sessions. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Belden Hirschmann RS, RSR, RSB, MACH100, MACH1000, MACH4000, MS, and OCTOPUS Classic Platform Switches (affected versions not specified) Description: An issue was discovered in the web interface of the affected switches, related to information exposure through query strings in GET requests. This may allow an attacker to impersonate a legitimate user or disclose protected information using a GET request. The vulnerability is associated with errors in processing GET requests, which can be exploited by a remote attacker. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.