First published: Tue Mar 24 2020(Updated: )
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, these devices use a hard-coded service code for access to the console.
Credit: ics-cert@hq.dhs.gov
Affected Software | Affected Version | How to fix |
---|---|---|
Moxa PT-7528-24TX-HV | <=4.0 | |
Moxa PT-7528-24TX-HV Firmware | ||
Moxa PT-7528-24TX-HV | <=4.0 | |
Moxa PT-7528-24TX-HV | ||
Moxa PT-7528-24TX-WV | <=4.0 | |
Moxa PT-7528-24TX-WV Firmware | ||
Moxa PT-7528-24TX-WV Firmware | <=4.0 | |
Moxa Pt-7528-24tx-wv-hv Firmware | ||
Moxa PT-7528-24TX-WV Firmware | <=4.0 | |
Moxa Pt-7528-24tx-wv-wv Firmware | ||
Moxa Pt-7528-8mst-16tx-4gsfp-hv-hv Firmware | <=4.0 | |
Moxa PT-7528-12MSC-12TX-4GSFP-HV Firmware | ||
Moxa PT-7528-12MSC-12TX-4GSFP-HV Firmware | <=4.0 | |
Moxa Pt-7528-12msc-12tx-4gsfp-hv-hv Firmware | ||
Moxa Pt-7528-12msc-12tx-4gsfp-wv Firmware | <=4.0 | |
Moxa Pt-7528-12msc-12tx-4gsfp-wv Firmware | ||
Moxa Pt-7528-12msc-12tx-4gsfp-wv Firmware | <=4.0 | |
Moxa PT-7528-12MSC-12TX-4GSFP-WV | ||
Moxa PT-7528-12MST-12TX-4GSFP-HV Firmware | <=4.0 | |
Moxa PT-7528-12MST-12TX-4GSFP-HV Firmware | ||
Moxa PT-7528-12MST-12TX-4GSFP-HV Firmware | <=4.0 | |
Moxa Pt-7528-12mst-12tx-4gsfp-hv-hv Firmware | ||
Moxa PT-7528-12MST-12TX-4GSFP-WV Firmware | <=4.0 | |
Moxa PT-7528-12MST-12TX-4GSFP-WV Firmware | ||
Moxa PT-7528-12MST-12TX-4GSFP-WV Firmware | <=4.0 | |
Moxa PT-7528-12MST-12TX-4GSFP-WV | ||
Moxa PT-7528-20MSC-4TX-4GSFP-HV Firmware | <=4.0 | |
Moxa PT-7528-16MSC-8TX-4GSFP-HV Firmware | ||
Moxa PT-7528-16MSC-8TX-4GSFP-HV Firmware | <=4.0 | |
Moxa PT-7528-16MSC-8TX-4GSFP-HV | ||
Moxa PT-7528-16MSC-8TX-4GSFP-WV-WV Firmware | <=4.0 | |
Moxa PT-7528-16MSC-8TX-4GSFP-WV Firmware | ||
Moxa PT-7528-16MSC-8TX-4GSFP-WV | <=4.0 | |
Moxa PT-7528-16MSC-8TX-4GSFP-WV-WV Firmware | ||
Moxa PT-7528 | <=4.0 | |
Moxa Pt-7528-16mst-8tx-4gsfp-hv Firmware | ||
Moxa PT-7528 | <=4.0 | |
Moxa PT-7528 | ||
Moxa PT-7528 | <=4.0 | |
Moxa PT-7528-16MST-8TX-4GSFP-WV Firmware | ||
Moxa PT-7528 | <=4.0 | |
Moxa PT-7528-16MST-8TX-4GSFP-WV | ||
Moxa PT-7528-20MSC-4TX-4GSFP-HV Firmware | <=4.0 | |
Moxa PT-7528-20MSC-4TX-4GSFP-HV Firmware | ||
Moxa PT-7528-20MSC-4TX-4GSFP-HV | <=4.0 | |
Moxa PT-7528-20MSC-4TX-4GSFP-HV | ||
Moxa PT-7528-20MSC-4TX-4GSFP-WV Firmware | <=4.0 | |
Moxa PT-7528-20MSC-4TX-4GSFP-WV Firmware | ||
Moxa Pt-7528-20msc-4tx-4gsfp-wv Firmware | <=4.0 | |
Moxa Pt-7528-20msc-4tx-4gsfp-wv Firmware | ||
Moxa PT-7528-20MST-4TX-4GSFP-HV Firmware | <=4.0 | |
Moxa PT-7528-20MST-4TX-4GSFP-HV Firmware | ||
Moxa PT-7528-20mst-4tx-4gsfp-hv Firmware | <=4.0 | |
Moxa PT-7528-20MST-4TX-4GSFP-HV | ||
Moxa PT-7528-20mst-4tx-4gsfp-wv Firmware | <=4.0 | |
Moxa PT-7528-20MST-4TX-4GSFP-WV Firmware | ||
Moxa PT-7528-20MST-4TX-4GSFP-WV Firmware | <=4.0 | |
Moxa Pt-7528-20mst-4tx-4gsfp-wv Firmware | ||
Moxa PT-7528-8MSC-16TX-4GSFP-HV | <=4.0 | |
Moxa PT-7528-8MSC-16TX-4GSFP-HV Firmware | ||
Moxa PT-7528-8MSC-16TX-4GSFP-HV Firmware | <=4.0 | |
Moxa PT-7528-8MSC-16TX-4GSFP-HV | ||
Moxa PT-7528-8MST-16TX-4GSFP-WV Firmware | <=4.0 | |
Moxa PT-7528-8MSC-16TX-4GSFP-WV Firmware | ||
Moxa PT-7528-8MSC-16TX-4GSFP-WV Firmware | <=4.0 | |
Moxa Pt-7528-8msc-16tx-4gsfp-wv-wv Firmware | ||
Moxa Pt-7528-8mst-16tx-4gsfp-hv-hv Firmware | <=4.0 | |
Moxa PT-7528 Series | ||
Moxa PT-7528 Firmware | <=4.0 | |
Moxa PT-7528-8MST-16TX-4GSFP-HV | ||
Moxa PT-7528-8MST-16TX-4GSFP-WV | <=4.0 | |
Moxa PT-7528-8MST-16TX-4GSFP-WV Firmware | ||
Moxa Pt-7528-8mst-16tx-4gsfp-wv Firmware | <=4.0 | |
Moxa PT-7528 | ||
Moxa PT-7528-8SSC-16TX-4GSFP-HV Firmware | <=4.0 | |
Moxa PT-7528-8SSC-16TX-4GSFP-HV Firmware | ||
Moxa PT-7528-8SSC-16TX-4GSFP-WV-WV Firmware | <=4.0 | |
Moxa PT-7528-8SSC-16TX-4GSFP-WV-WV Firmware | ||
Moxa PT-7828-F-24 | <=3.9 | |
Moxa PT-7828-F-24 Firmware | ||
Moxa PT-7828-F-24 Firmware | <=3.9 | |
Moxa PT-7828-F-24 Firmware | ||
Moxa PT-7828-F-24 Firmware | <=3.9 | |
Moxa PT-7828-F-24-HV Firmware | ||
Moxa PT-7828-F-48-HV Firmware | <=3.9 | |
Moxa PT-7828-F-48-HV Firmware | ||
Moxa PT-7828-F-48-48 Firmware | <=3.9 | |
Moxa Pt-7828-f-48-48 Firmware | ||
Moxa PT-7828-F-48-HV Firmware | <=3.9 | |
Moxa PT-7828-F-48-HV Firmware | ||
Moxa PT-7828-F-HV-HV Firmware | <=3.9 | |
Moxa PT-7828-F-HV Firmware | ||
Moxa PT-7828-F-HV-HV | <=3.9 | |
Moxa PT-7828-F-HV | ||
Moxa PT-7828-R-24 Firmware | <=3.9 | |
Moxa PT-7828-R-24 Firmware | ||
Moxa PT-7828-R-24 Firmware | <=3.9 | |
Moxa PT-7828-R-24-24 Firmware | ||
Moxa PT-7828-R-24-HV Firmware | <=3.9 | |
Moxa PT-7828-R-24-HV Firmware | ||
Moxa PT-7828-R-48-HV Firmware | <=3.9 | |
Moxa PT-7828-R-48-48 Firmware | ||
Moxa PT-7828-R-48 Firmware | <=3.9 | |
Moxa PT-7828-R-48-48 Firmware | ||
Moxa PT-7828-R-48-HV Firmware | <=3.9 | |
Moxa PT-7828-R-48-HV Firmware | ||
Moxa Pt-7828-r-hv-hv Firmware | <=3.9 | |
Moxa PT-7828-R-HV Firmware | ||
Moxa PT-7828-R-HV Firmware | <=3.9 | |
Moxa PT-7828-R-HV Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-6985 has a high severity rating due to its use of hard-coded service codes that can lead to unauthorized access to the console.
To mitigate CVE-2020-6985, update the firmware for Moxa PT-7528 and PT-7828 series devices to the latest version where this vulnerability is addressed.
CVE-2020-6985 affects Moxa PT-7528 series firmware versions 4.0 or lower and PT-7828 series firmware versions 3.9 or lower.
The impact of CVE-2020-6985 can include unauthorized access to device configuration and management due to hard-coded service codes.
Yes, CVE-2020-6985 is considered exploitable remotely due to the vulnerabilities associated with hard-coded access codes.