CVE-2019-19707

Name of the Vulnerable Software and Affected Versions Moxa EDS-G508E versions through 6.0 Moxa EDS-G512E versions through 6.0 Moxa EDS-G516E versions through 6.0

Description The issue is related to an uncontrolled resource consumption in the firmware of Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices. This can lead to a denial of service. The denial of service can occur via PROFINET DCE-RPC endpoint discovery packets.

Recommendations For Moxa EDS-G508E versions through 6.0, consider restricting access to the PROFINET DCE-RPC endpoint to minimize the risk of exploitation. For Moxa EDS-G512E versions through 6.0, consider restricting access to the PROFINET DCE-RPC endpoint to minimize the risk of exploitation. For Moxa EDS-G516E versions through 6.0, consider restricting access to the PROFINET DCE-RPC endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.