Moxa Eds-g516e Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Moxa Eds-g516e Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2020-6991 — CVSS 9.8 (critical): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force.
• CVE-2020-6981 — CVSS 9.8 (critical): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication.
• CVE-2020-7007 — CVSS 9.8 (critical): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go…
• CVE-2019-19707 — CVSS 7.5 (high): On Moxa EDS-G508E, EDS-G512E, and EDS-G516E devices (with firmware through 6.0), denial of service can occur via PROFINET DCE-RPC endpoint…
• CVE-2020-6997 — CVSS 7.5 (high): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext.
• CVE-2020-6979 — CVSS 7.5 (high): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the…
• CVE-2020-7001 — CVSS 7.5 (high): In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow…