Out-of-bounds Write Vulnerability (Moxa PT-7728 Series)
En bref
- Source
- NVD
- EPSS
- EPSS 0.72 % · centile 54 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Moxa
- Statut NVD
- Deferred
Rechercher sur…
Description
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack.
Faiblesses (CWE)
- CWE-787 — Écriture hors limites
Références
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switches
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switches
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switches
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | Moxa |
| CVSS 4.0 | HIGH 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | Moxa |
| CVSS 4.0 | HIGH 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · psirt@moxa.com (Secondary) |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · psirt@moxa.com (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2024-48033
- GCVE · GCVE-0-2024-7695
Avis du CERT-FR
- CERTFR-2025-AVI-0155 — Vulnérabilité dans les produits Moxa · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0104 — Multiples vulnérabilités dans les produits Moxa · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0080 — Vulnérabilité dans les produits Moxa · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Moxa · PT-7728 Series | affected 1.0 ≤ 3.9 |
| Moxa · PT-7828 Series | affected 1.0 ≤ 4.0 |
| Moxa · PT-G503 Series | affected 1.0 ≤ 5.3 |
| Moxa · PT-G510 Series | affected 1.0 ≤ 6.5 |
| Moxa · PT-G7728 Series | affected 1.0 ≤ 6.4 |
| Moxa · PT-G7828 Series | affected 1.0 ≤ 6.4 |
| Moxa · EDS-608 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-611 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-616 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-619 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-405A Series | affected 1.0 ≤ 3.14 |
| Moxa · EDS-408A Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-505A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-508A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-510A Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-516A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-518A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-G509 Series | affected 1.0 ≤ 3.10 |
| Moxa · EDS-P510 Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-P510A Series | affected 1.0 ≤ 3.11 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |