PT-2017-3815

CVE-2020-6983

·

Published

2017-09-01

·

Updated

2020-03-26

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Moxa PT-7528 series firmware versions 4.0 and lower Moxa PT-7828 series firmware versions 3.9 and lower
Description The issue is related to the use of a hard-coded cryptographic key in the affected products, which increases the risk of confidential data recovery. This could potentially allow a remote attacker to elevate their privileges.
Recommendations For Moxa PT-7528 series firmware versions 4.0 and lower, consider updating to a version higher than 4.0 to mitigate the risk. For Moxa PT-7828 series firmware versions 3.9 and lower, consider updating to a version higher than 3.9 to mitigate the risk. As a temporary workaround, consider restricting access to sensitive data and accounts until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾