CVE-2020-6985

CRITICAL

9.8

Description

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console.

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/24/2020

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

moxa:pt-7528-12msc-12tx-4gsfp-hvmoxa:pt-7528-12msc-12tx-4gsfp-hv-hvmoxa:pt-7528-12msc-12tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-12msc-12tx-4gsfp-hv_firmwaremoxa:pt-7528-12msc-12tx-4gsfp-wvmoxa:pt-7528-12msc-12tx-4gsfp-wv-wvmoxa:pt-7528-12msc-12tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-12msc-12tx-4gsfp-wv_firmwaremoxa:pt-7528-12mst-12tx-4gsfp-hvmoxa:pt-7528-12mst-12tx-4gsfp-hv-hvmoxa:pt-7528-12mst-12tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-12mst-12tx-4gsfp-hv_firmwaremoxa:pt-7528-12mst-12tx-4gsfp-wvmoxa:pt-7528-12mst-12tx-4gsfp-wv-wvmoxa:pt-7528-12mst-12tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-12mst-12tx-4gsfp-wv_firmwaremoxa:pt-7528-16msc-8tx-4gsfp-hvmoxa:pt-7528-16msc-8tx-4gsfp-hv-hvmoxa:pt-7528-16msc-8tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-16msc-8tx-4gsfp-hv_firmwaremoxa:pt-7528-16msc-8tx-4gsfp-wvmoxa:pt-7528-16msc-8tx-4gsfp-wv-wvmoxa:pt-7528-16msc-8tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-16msc-8tx-4gsfp-wv_firmwaremoxa:pt-7528-16mst-8tx-4gsfp-hvmoxa:pt-7528-16mst-8tx-4gsfp-hv-hvmoxa:pt-7528-16mst-8tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-16mst-8tx-4gsfp-hv_firmwaremoxa:pt-7528-16mst-8tx-4gsfp-wvmoxa:pt-7528-16mst-8tx-4gsfp-wv-wvmoxa:pt-7528-16mst-8tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-16mst-8tx-4gsfp-wv_firmwaremoxa:pt-7528-20msc-4tx-4gsfp-hvmoxa:pt-7528-20msc-4tx-4gsfp-hv-hvmoxa:pt-7528-20msc-4tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-20msc-4tx-4gsfp-hv_firmwaremoxa:pt-7528-20msc-4tx-4gsfp-wvmoxa:pt-7528-20msc-4tx-4gsfp-wv-wvmoxa:pt-7528-20msc-4tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-20msc-4tx-4gsfp-wv_firmwaremoxa:pt-7528-20mst-4tx-4gsfp-hvmoxa:pt-7528-20mst-4tx-4gsfp-hv-hvmoxa:pt-7528-20mst-4tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-20mst-4tx-4gsfp-hv_firmwaremoxa:pt-7528-20mst-4tx-4gsfp-wvmoxa:pt-7528-20mst-4tx-4gsfp-wv-wvmoxa:pt-7528-20mst-4tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-20mst-4tx-4gsfp-wv_firmwaremoxa:pt-7528-24tx-hvmoxa:pt-7528-24tx-hv-hvmoxa:pt-7528-24tx-hv-hv_firmwaremoxa:pt-7528-24tx-hv_firmwaremoxa:pt-7528-24tx-wvmoxa:pt-7528-24tx-wv-hvmoxa:pt-7528-24tx-wv-hv_firmwaremoxa:pt-7528-24tx-wv-wvmoxa:pt-7528-24tx-wv-wv_firmwaremoxa:pt-7528-24tx-wv_firmwaremoxa:pt-7528-8msc-16tx-4gsfp-hvmoxa:pt-7528-8msc-16tx-4gsfp-hv-hvmoxa:pt-7528-8msc-16tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-8msc-16tx-4gsfp-hv_firmwaremoxa:pt-7528-8msc-16tx-4gsfp-wvmoxa:pt-7528-8msc-16tx-4gsfp-wv-wvmoxa:pt-7528-8msc-16tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-8msc-16tx-4gsfp-wv_firmwaremoxa:pt-7528-8mst-16tx-4gsfp-hvmoxa:pt-7528-8mst-16tx-4gsfp-hv-hvmoxa:pt-7528-8mst-16tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-8mst-16tx-4gsfp-hv_firmwaremoxa:pt-7528-8mst-16tx-4gsfp-wvmoxa:pt-7528-8mst-16tx-4gsfp-wv-wvmoxa:pt-7528-8mst-16tx-4gsfp-wv-wv_firmwaremoxa:pt-7528-8mst-16tx-4gsfp-wv_firmwaremoxa:pt-7528-8ssc-16tx-4gsfp-hv-hvmoxa:pt-7528-8ssc-16tx-4gsfp-hv-hv_firmwaremoxa:pt-7528-8ssc-16tx-4gsfp-wv-wvmoxa:pt-7528-8ssc-16tx-4gsfp-wv-wv_firmwaremoxa:pt-7828-f-24moxa:pt-7828-f-24-24moxa:pt-7828-f-24-24_firmwaremoxa:pt-7828-f-24-hvmoxa:pt-7828-f-24-hv_firmwaremoxa:pt-7828-f-24_firmwaremoxa:pt-7828-f-48moxa:pt-7828-f-48-48moxa:pt-7828-f-48-48_firmwaremoxa:pt-7828-f-48-hvmoxa:pt-7828-f-48-hv_firmwaremoxa:pt-7828-f-48_firmwaremoxa:pt-7828-f-hvmoxa:pt-7828-f-hv-hvmoxa:pt-7828-f-hv-hv_firmwaremoxa:pt-7828-f-hv_firmwaremoxa:pt-7828-r-24moxa:pt-7828-r-24-24moxa:pt-7828-r-24-24_firmwaremoxa:pt-7828-r-24-hvmoxa:pt-7828-r-24-hv_firmwaremoxa:pt-7828-r-24_firmwaremoxa:pt-7828-r-48moxa:pt-7828-r-48-48moxa:pt-7828-r-48-48_firmwaremoxa:pt-7828-r-48-hvmoxa:pt-7828-r-48-hv_firmwaremoxa:pt-7828-r-48_firmwaremoxa:pt-7828-r-hvmoxa:pt-7828-r-hv-hvmoxa:pt-7828-r-hv-hv_firmwaremoxa:pt-7828-r-hv_firmware

Faiblesses (CWE)

CWE-798CWE-798

References

https://www.us-cert.gov/ics/advisories/icsa-20-056-03(ics-cert@hq.dhs.gov)

https://www.us-cert.gov/ics/advisories/icsa-20-056-03(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.