Vulnerability in Moxa Eds-508a Series
CVE-2024-12297
Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.
Published · last modified .
EPSS exploit prediction
EPSS: 0.008 (57.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 57th percentile — 57.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000
Affected products
- Moxa Eds-508a Series — versions 1.0
- Moxa Pt-508 Series — versions 1.0
- Moxa Pt-510 Series — versions 1.0
- Moxa Pt-7528 Series — versions 1.0
- Moxa Pt-7728 Series — versions 1.0
- Moxa Pt-7828 Series — versions 1.0
- Moxa Pt-G503 Series — versions 1.0
- Moxa Pt-G510 Series — versions 1.0
- Moxa Pt-G7728 Series — versions 1.0
- Moxa Pt-G7828 Series — versions 1.0