by Kastro
Paper/Archive/CVE-2024-12297

CVE-2024-12297

Moxa EDS-508A Series — Frontend Authorization Logic Disclosure Vulnerability

EPSS 0.8%CVSS 9.2
critical.is priorityof 100
39
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 58.0.580 × 2011.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.

Affected

ProductAffectedFixed inSource
EDS-508A Series1.0 – 3.11–CNA
PT-508 Series1.0 – 3.8–CNA
PT-510 Series1.0 – 3.8–CNA
PT-7528 Series1.0 – 5.0–CNA
PT-7728 Series1.0 – 3.9–CNA
PT-7828 Series1.0 – 4.0–CNA
PT-G503 Series1.0 – 5.3–CNA
PT-G510 Series1.0 – 6.5–CNA
PT-G7728 Series1.0 – 6.5–CNA
PT-G7828 Series1.0 – 6.5–CNA

Scores by source

Moxa (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisorymoxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-seriesadvisorymoxa.com/en/support/product-support/security-advisory/mpsa-241408-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-identified-in-pt-switches