Weak password requirements in Moxa EDS-G516E and Moxa EDS-510E - CVE-2020-6991

Vulnerability details

The vulnerability allows an attacker to perform brute-force attack and guess the password.

The vulnerability exists due to weak password requirements. An attacker can perform a brute-force attack and guess users' passwords.

Affected software

How to mitigate CVE-2020-6991

External References

• https://ics-cert.us-cert.gov/advisories/icsa-20-056-04
• https://www.moxa.com/en/support/support/security-advisory/eds-g516e-510e-ethernet-switches-vulnerabilities

Related Security Bulletins

• Multiple vulnerabilities in Moxa EDS-G516E and EDS-510E Series Ethernet Switches