moog records
4 published records for vendor moog.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-306 Missing Authentication for Critical Function1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-798 Use of Hard-coded Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-24054No exploit | The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given pmoog · exvf5c-2 firmware · CWE-78 | Critical9.8 | — | 2.5% | Aug 21, 2020 |
40Plan | CVE-2020-24051No exploit | The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authmoog · exvf5c-2 firmware · CWE-306 | Critical9.8 | — | 2.2% | Aug 21, 2020 |
37Monitor | CVE-2020-24052No exploit | Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to moog · exvf5c-2 firmware · CWE-611 | Critical9.1 | — | 1.9% | Aug 21, 2020 |
30Monitor | CVE-2020-24053No exploit | Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability.moog · exvf5c-2 firmware · CWE-798 | High7.5 | — | 1.2% | Aug 21, 2020 |
- CVE-2020-2405440Plan
The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given p
CriticalCVSS 9.8No exploitEPSS 2%moog · exvf5c-2 firmwareAug 21, 2020
- CVE-2020-2405140Plan
The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires auth
CriticalCVSS 9.8No exploitEPSS 2%moog · exvf5c-2 firmwareAug 21, 2020
- CVE-2020-2405237Monitor
Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to
CriticalCVSS 9.1No exploitEPSS 1%moog · exvf5c-2 firmwareAug 21, 2020
- CVE-2020-2405330Monitor
Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability.
HighCVSS 7.5No exploitEPSS 1%moog · exvf5c-2 firmwareAug 21, 2020