Out-of-bounds Write Vulnerability (Moxa PT-7728 Series)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.72 % · percentile 54 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Moxa
- NVD status
- Deferred
Description
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack.
Weaknesses (CWE)
- CWE-787 — Out-of-bounds Write
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switches
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switches
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switches
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | Moxa |
| CVSS 4.0 | HIGH 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | Moxa |
| CVSS 4.0 | HIGH 8.7 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | NVD · psirt@moxa.com (Secondary) |
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · psirt@moxa.com (Secondary) |
European references
- ENISA EUVD · EUVD-2024-48033
- GCVE · GCVE-0-2024-7695
CERT-FR advisories
- CERTFR-2025-AVI-0155 — Vulnérabilité dans les produits Moxa · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0104 — Multiples vulnérabilités dans les produits Moxa · cert.ssi.gouv.fr
- CERTFR-2025-AVI-0080 — Vulnérabilité dans les produits Moxa · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Moxa · PT-7728 Series | affected 1.0 ≤ 3.9 |
| Moxa · PT-7828 Series | affected 1.0 ≤ 4.0 |
| Moxa · PT-G503 Series | affected 1.0 ≤ 5.3 |
| Moxa · PT-G510 Series | affected 1.0 ≤ 6.5 |
| Moxa · PT-G7728 Series | affected 1.0 ≤ 6.4 |
| Moxa · PT-G7828 Series | affected 1.0 ≤ 6.4 |
| Moxa · EDS-608 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-611 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-616 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-619 Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-405A Series | affected 1.0 ≤ 3.14 |
| Moxa · EDS-408A Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-505A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-508A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-510A Series | affected 1.0 ≤ 3.12 |
| Moxa · EDS-516A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-518A Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-G509 Series | affected 1.0 ≤ 3.10 |
| Moxa · EDS-P510 Series | affected 1.0 ≤ 3.11 |
| Moxa · EDS-P510A Series | affected 1.0 ≤ 3.11 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |