Authentication Bypass Vulnerability in Moxa Ethernet Switch EDS-508A Series

CVE-2024-12297

Summary

The Moxa EDS-508A Series Ethernet switch is prone to an authentication bypass vulnerability due to inadequate authorization mechanisms. Attackers can exploit this weakness to perform brute-force attacks, allowing them to guess valid credentials, or execute MD5 collision attacks to forge authentication hashes. This can severely compromise the security of the device, potentially allowing unauthorized access.

References