Buffer Overflow Vulnerability in Moxa PT-7528 and PT-7828 Series Firmware
CVE-2020-6989

9.8CRITICAL

Key Information:

Vendor
Moxa
Status
Moxa Pt-7528 Series Firmware, Version 4.0 Or Lower, Pt-7828 Series Firmware, Version 3.9 Or Lower
Vendor
CVE Published:
24 March 2020

Summary

A buffer overflow vulnerability exists in the Moxa PT-7528 series firmware (Version 4.0 and lower) and PT-7828 series firmware (Version 3.9 and lower). This security flaw in the web server can be exploited by remote attackers, potentially leading to a denial-of-service condition or enabling the execution of arbitrary code. Organizations using these firmware versions are encouraged to assess their vulnerability and apply necessary security patches or mitigations.

Affected Version(s)

Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower Moxa PT-7528 series firmware, Version 4.0 or lower, PT-7828 series firmware, Version 3.9 or lower

References

https://www.us-cert.gov/ics/advisories/icsa-20-056-03
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.