Buffer overflow in Moxa EDS-G516E and Moxa EDS-510E - CVE-2020-6989

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to some of the parameters in the setting pages do not ensure text is the correct size for its buffer. A remote authenticated attacker can trigger memory corruption and cause a denial of service condition on the target system.

Affected software

How to mitigate CVE-2020-6989

External References

• https://www.moxa.com/en/support/support/security-advisory/eds-g516e-510e-ethernet-switches-vulnerabi...
• https://www.us-cert.gov/ics/advisories/icsa-20-056-04

Related Security Bulletins

• Multiple vulnerabilities in Moxa EDS-G516E and EDS-510E Series Ethernet Switches