CVE-2020-6985CWE-798

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for…

published March 24, 2020

CVSS
—
EPSS
2%
Percentile
79.6
In the wild
Unconfirmed
What it is

⚠️ A hard-coded service code in Moxa PT-7528 and PT-7828 series firmware could leave your devices wide open to prying eyes! 🕵️‍♂️ Think of it like a hotel that uses the same room key for every guest without changing it — anyone who knows the code can waltz right into any room without a hitch! 🏨 This vulnerability allows anyone who discovers the hard-coded access code to potentially access the console. This could lead to unauthorized changes or even full control over the device, creating chaos in your network.

Put simply

Think of it like a hotel that uses the same room key for every guest without changing it — anyone who knows the code can waltz right into any room without a hitch! 🏨 Firmware versions 4.0 or lower for PT-7528 series and versions 3.9 or lower for PT-7828 series contain a hard-coded service code, which poses a serious risk of unauthorized access.

What to do

This vulnerability allows anyone who discovers the hard-coded access code to potentially access the console. This could lead to unauthorized changes or even full control over the device, creating chaos in your network. Update your Moxa devices to the latest firmware version immediately to eliminate this risk. Review access logs regularly and restrict physical access to the devices until fixed. 🛡️ You've got this! Follow these steps and keep your network safe and sound! 🚀

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01905 · 79.6th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2020-03-24T19:11Z
EPSS history
Timeline
  • 24 MAR 19:11Z
    In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for…
    cvelistv5