CVE-2020-6987: Weak Encryption
Published Mar 24, 2020
·Updated
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the affected products use a weak cryptographic algorithm, which may allow confidential information to be disclosed.
Affected Software
220 affected components
MOXA Pt-7528-24tx-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv
MOXA Pt-7528-24tx-hv-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv-hv
MOXA Pt-7528-24tx-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv
MOXA Pt-7528-24tx-wv-hv Firmware<=4.0
MOXA Pt-7528-24tx-wv-hv
MOXA Pt-7528-24tx-wv-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv-wv
MOXA Pt-7528-12msc-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv
MOXA Pt-7528-12msc-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv
MOXA Pt-7528-12mst-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv
MOXA Pt-7528-12mst-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv
MOXA Pt-7528-16msc-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv
MOXA Pt-7528-16msc-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv
MOXA Pt-7528-16mst-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv
MOXA Pt-7528-16mst-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv
MOXA Pt-7528-20msc-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv
MOXA Pt-7528-20msc-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv
MOXA Pt-7528-20mst-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv
MOXA Pt-7528-20mst-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv
MOXA Pt-7528-8msc-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv
MOXA Pt-7528-8msc-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv
MOXA Pt-7528-8mst-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv
MOXA Pt-7528-8mst-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv
MOXA Pt-7828-f-24 Firmware<=3.9
MOXA Pt-7828-f-24
MOXA Pt-7828-f-24-24 Firmware<=3.9
MOXA Pt-7828-f-24-24
MOXA Pt-7828-f-24-hv Firmware<=3.9
MOXA Pt-7828-f-24-hv
MOXA Pt-7828-f-48 Firmware<=3.9
MOXA Pt-7828-f-48
MOXA Pt-7828-f-48-48 Firmware<=3.9
MOXA Pt-7828-f-48-48
MOXA Pt-7828-f-48-hv Firmware<=3.9
MOXA Pt-7828-f-48-hv
MOXA Pt-7828-f-hv Firmware<=3.9
MOXA Pt-7828-f-hv
MOXA Pt-7828-f-hv-hv Firmware<=3.9
MOXA Pt-7828-f-hv-hv
MOXA Pt-7828-r-24 Firmware<=3.9
MOXA Pt-7828-r-24
MOXA Pt-7828-r-24-24 Firmware<=3.9
MOXA Pt-7828-r-24-24
MOXA Pt-7828-r-24-hv Firmware<=3.9
MOXA Pt-7828-r-24-hv
MOXA Pt-7828-r-48 Firmware<=3.9
MOXA Pt-7828-r-48
MOXA Pt-7828-r-48-48 Firmware<=3.9
MOXA Pt-7828-r-48-48
MOXA Pt-7828-r-48-hv Firmware<=3.9
MOXA Pt-7828-r-48-hv
MOXA Pt-7828-r-hv Firmware<=3.9
MOXA Pt-7828-r-hv
MOXA Pt-7828-r-hv-hv Firmware<=3.9
MOXA Pt-7828-r-hv-hv
All of the following
MOXA Pt-7528-24tx-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv
All of the following
MOXA Pt-7528-24tx-hv-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv-hv
All of the following
MOXA Pt-7528-24tx-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv
All of the following
MOXA Pt-7528-24tx-wv-hv Firmware<=4.0
MOXA Pt-7528-24tx-wv-hv
All of the following
MOXA Pt-7528-24tx-wv-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv-wv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv
All of the following
MOXA Pt-7828-f-24 Firmware<=3.9
MOXA Pt-7828-f-24
All of the following
MOXA Pt-7828-f-24-24 Firmware<=3.9
MOXA Pt-7828-f-24-24
All of the following
MOXA Pt-7828-f-24-hv Firmware<=3.9
MOXA Pt-7828-f-24-hv
All of the following
MOXA Pt-7828-f-48 Firmware<=3.9
MOXA Pt-7828-f-48
All of the following
MOXA Pt-7828-f-48-48 Firmware<=3.9
MOXA Pt-7828-f-48-48
All of the following
MOXA Pt-7828-f-48-hv Firmware<=3.9
MOXA Pt-7828-f-48-hv
All of the following
MOXA Pt-7828-f-hv Firmware<=3.9
MOXA Pt-7828-f-hv
All of the following
MOXA Pt-7828-f-hv-hv Firmware<=3.9
MOXA Pt-7828-f-hv-hv
All of the following
MOXA Pt-7828-r-24 Firmware<=3.9
MOXA Pt-7828-r-24
All of the following
MOXA Pt-7828-r-24-24 Firmware<=3.9
MOXA Pt-7828-r-24-24
All of the following
MOXA Pt-7828-r-24-hv Firmware<=3.9
MOXA Pt-7828-r-24-hv
All of the following
MOXA Pt-7828-r-48 Firmware<=3.9
MOXA Pt-7828-r-48
All of the following
MOXA Pt-7828-r-48-48 Firmware<=3.9
MOXA Pt-7828-r-48-48
All of the following
MOXA Pt-7828-r-48-hv Firmware<=3.9
MOXA Pt-7828-r-48-hv
All of the following
MOXA Pt-7828-r-hv Firmware<=3.9
MOXA Pt-7828-r-hv
All of the following
MOXA Pt-7828-r-hv-hv Firmware<=3.9
MOXA Pt-7828-r-hv-hv
Event History
Mar 24, 2020
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
DescriptionWeakness
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What devices are affected by CVE-2020-6987?
The Moxa PT-7528 series firmware versions up to 4.0 and PT-7828 series firmware versions up to 3.9 are impacted by CVE-2020-6987.
2
What is the vulnerability described in CVE-2020-6987?
CVE-2020-6987 describes a weakness in the cryptographic algorithm used in certain Moxa firmware, which may lead to the disclosure of confidential information.
3
What is the impact of CVE-2020-6987?
The vulnerability can potentially allow unauthorized access to confidential information, compromising the security of the affected devices.
4
How do I remediate CVE-2020-6987?
To fix CVE-2020-6987, it is recommended to update the affected Moxa devices to the latest firmware versions that address this vulnerability.
5
Is there a patch available for CVE-2020-6987?
Yes, Moxa has released updates for the PT-7528 and PT-7828 series firmware to mitigate the vulnerabilities described in CVE-2020-6987.