جزئیات آسیب‌پذیری
CVE-2024-7695
Moxa EDS-405A SeriesMoxa EDS-408A SeriesMoxa EDS-505A SeriesMoxa EDS-508A SeriesMoxa EDS-510A SeriesMoxa EDS-510E Series
Out-of-bounds Write Vulnerability
CVSS 4.0
8.7بالا
شرح رسمی (انگلیسی)
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.7بالا | 4.0 | CVEProject cvelistV5 (CNA) (Moxa) | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
| 7.5بالا | 3.1 | CVEProject cvelistV5 (CNA) (Moxa) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Moxa | EDS-405A Series | 1.0 ≤ v ≤ 3.14 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-408A Series | 1.0 ≤ v ≤ 3.12 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-505A Series | 1.0 ≤ v ≤ 3.11 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-508A Series | 1.0 ≤ v ≤ 3.11 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-510A Series | 1.0 ≤ v ≤ 3.12 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-510E Series | 1.0 ≤ v ≤ 5.5 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-516A Series | 1.0 ≤ v ≤ 3.11 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-518A Series | 1.0 ≤ v ≤ 3.11 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-518E Series | 1.0 ≤ v ≤ 6.3 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-528E Series | 1.0 ≤ v ≤ 6.3 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-608 Series | 1.0 ≤ v ≤ 3.12 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-611 Series | 1.0 ≤ v ≤ 3.12 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-616 Series | 1.0 ≤ v ≤ 3.12 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-619 Series | 1.0 ≤ v ≤ 3.12 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-G508E Series | 1.0 ≤ v ≤ 6.4 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-G509 Series | 1.0 ≤ v ≤ 3.10 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-G512E Series | 1.0 ≤ v ≤ 6.4 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-G516E Series | 1.0 ≤ v ≤ 6.4 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-P506E Series | 1.0 ≤ v ≤ 5.8 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-P510 Series | 1.0 ≤ v ≤ 3.11 | CVEProject cvelistV5 (CNA) |
| Moxa | EDS-P510A Series | 1.0 ≤ v ≤ 3.11 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7526A Series | 1.0 ≤ v ≤ 5.10 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7528A Series | 1.0 ≤ v ≤ 5.10 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7748A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7750A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7752A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7826A Series | 1.0 ≤ v ≤ 5.10 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7828A Series | 1.0 ≤ v ≤ 5.10 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7848A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7850A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | ICS-G7852A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | IKS-6726A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | IKS-6728A Series | 1.0 ≤ v ≤ 5.9 | CVEProject cvelistV5 (CNA) |
| Moxa | IKS-G6524A Series | 1.0 ≤ v ≤ 5.10 | CVEProject cvelistV5 (CNA) |
| Moxa | IKS-G6824A Series | 1.0 ≤ v ≤ 5.10 | CVEProject cvelistV5 (CNA) |
| Moxa | PT-7728 Series | 1.0 ≤ v ≤ 3.9 | CVEProject cvelistV5 (CNA) |
| Moxa | PT-7828 Series | 1.0 ≤ v ≤ 4.0 | CVEProject cvelistV5 (CNA) |
| Moxa | PT-G503 Series | 1.0 ≤ v ≤ 5.3 | CVEProject cvelistV5 (CNA) |
| Moxa | PT-G510 Series | 1.0 ≤ v ≤ 6.5 | CVEProject cvelistV5 (CNA) |
| Moxa | PT-G7728 Series | 1.0 ≤ v ≤ 6.4 | CVEProject cvelistV5 (CNA) |
| Moxa | PT-G7828 Series | 1.0 ≤ v ≤ 6.4 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-3006 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-3008 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-3010 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-3016 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-G3006 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-G3008 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-G3010 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | SDS-G3016 Series | 1.0 ≤ v ≤ 3.0 | CVEProject cvelistV5 (CNA) |
| Moxa | TN-G4500 Series | 1.0 ≤ v ≤ 5.3 | CVEProject cvelistV5 (CNA) |
| Moxa | TN-G6500 Series | 1.0 ≤ v ≤ 5.4 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۳- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switches vendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switches vendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switches vendor-advisory
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۳/۱۱/۱۰
- آخرین به‌روزرسانی
- ۱۴۰۳/۱۲/۰۴
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- Moxa
پیش‌بینی بهره‌برداری (EPSS)
۰٫۷۱٪
احتمال بهره‌برداری در ۳۰ روز
۵۴٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-787Out-of-bounds Write