In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a hard-coded cryptographic key, increasing the possibilit

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• moxa eds-510e firmwareup to 5.2 inclusive
• moxa eds-g516e firmwareup to 5.2 inclusive

Versions reported by the vendor

Affected version ranges reported by the assigning authority (icscert). Independent of NVD's CPE analysis and usually ahead of it.

• n/a Moxa EDS-G516E Series firmware, Version 5.2 or lower

  • Moxa EDS-G516E Series firmware, Version 5.2 or loweraffected

Other highest-scoring records for the same primary product.

• CVE-2020-7007In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the attacker may execute arbitrary codes or target the device, causing it to go out
  40Plan
• CVE-2020-6981In Moxa EDS-G516E Series firmware, Version 5.2 or lower, an attacker may gain access to the system without proper authentication.
  40Plan
• CVE-2020-6991In Moxa EDS-G516E Series firmware, Version 5.2 or lower, weak password requirements may allow an attacker to gain access using brute force.
  39Monitor
• CVE-2020-7001In Moxa EDS-G516E Series firmware, Version 5.2 or lower, the affected products use a weak cryptographic algorithm, which may allow confident
  30Monitor
• CVE-2020-6997In Moxa EDS-G516E Series firmware, Version 5.2 or lower, sensitive information is transmitted over some web applications in cleartext.
  30Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.