CVE-2020-6995: Critical severity MOXA Pt-7528-24tx-hv Firmware vulnerability
Published Mar 24, 2020
·Updated
In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access.
Affected Software
220 affected components
MOXA Pt-7528-24tx-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv
MOXA Pt-7528-24tx-hv-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv-hv
MOXA Pt-7528-24tx-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv
MOXA Pt-7528-24tx-wv-hv Firmware<=4.0
MOXA Pt-7528-24tx-wv-hv
MOXA Pt-7528-24tx-wv-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv-wv
MOXA Pt-7528-12msc-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv
MOXA Pt-7528-12msc-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv
MOXA Pt-7528-12mst-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv
MOXA Pt-7528-12mst-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv
MOXA Pt-7528-16msc-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv
MOXA Pt-7528-16msc-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv
MOXA Pt-7528-16mst-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv
MOXA Pt-7528-16mst-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv
MOXA Pt-7528-20msc-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv
MOXA Pt-7528-20msc-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv
MOXA Pt-7528-20mst-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv
MOXA Pt-7528-20mst-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv
MOXA Pt-7528-8msc-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv
MOXA Pt-7528-8msc-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv
MOXA Pt-7528-8mst-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv
MOXA Pt-7528-8mst-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv
MOXA Pt-7828-f-24 Firmware<=3.9
MOXA Pt-7828-f-24
MOXA Pt-7828-f-24-24 Firmware<=3.9
MOXA Pt-7828-f-24-24
MOXA Pt-7828-f-24-hv Firmware<=3.9
MOXA Pt-7828-f-24-hv
MOXA Pt-7828-f-48 Firmware<=3.9
MOXA Pt-7828-f-48
MOXA Pt-7828-f-48-48 Firmware<=3.9
MOXA Pt-7828-f-48-48
MOXA Pt-7828-f-48-hv Firmware<=3.9
MOXA Pt-7828-f-48-hv
MOXA Pt-7828-f-hv Firmware<=3.9
MOXA Pt-7828-f-hv
MOXA Pt-7828-f-hv-hv Firmware<=3.9
MOXA Pt-7828-f-hv-hv
MOXA Pt-7828-r-24 Firmware<=3.9
MOXA Pt-7828-r-24
MOXA Pt-7828-r-24-24 Firmware<=3.9
MOXA Pt-7828-r-24-24
MOXA Pt-7828-r-24-hv Firmware<=3.9
MOXA Pt-7828-r-24-hv
MOXA Pt-7828-r-48 Firmware<=3.9
MOXA Pt-7828-r-48
MOXA Pt-7828-r-48-48 Firmware<=3.9
MOXA Pt-7828-r-48-48
MOXA Pt-7828-r-48-hv Firmware<=3.9
MOXA Pt-7828-r-48-hv
MOXA Pt-7828-r-hv Firmware<=3.9
MOXA Pt-7828-r-hv
MOXA Pt-7828-r-hv-hv Firmware<=3.9
MOXA Pt-7828-r-hv-hv
All of the following
MOXA Pt-7528-24tx-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv
All of the following
MOXA Pt-7528-24tx-hv-hv Firmware<=4.0
MOXA Pt-7528-24tx-hv-hv
All of the following
MOXA Pt-7528-24tx-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv
All of the following
MOXA Pt-7528-24tx-wv-hv Firmware<=4.0
MOXA Pt-7528-24tx-wv-hv
All of the following
MOXA Pt-7528-24tx-wv-wv Firmware<=4.0
MOXA Pt-7528-24tx-wv-wv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv
All of the following
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12msc-12tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv
All of the following
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-12mst-12tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv
All of the following
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16msc-8tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv
All of the following
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-16mst-8tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv
All of the following
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20msc-4tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv
All of the following
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-20mst-4tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv
All of the following
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8msc-16tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv
All of the following
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8mst-16tx-4gsfp-wv-wv
All of the following
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-hv-hv
All of the following
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv Firmware<=4.0
MOXA Pt-7528-8ssc-16tx-4gsfp-wv-wv
All of the following
MOXA Pt-7828-f-24 Firmware<=3.9
MOXA Pt-7828-f-24
All of the following
MOXA Pt-7828-f-24-24 Firmware<=3.9
MOXA Pt-7828-f-24-24
All of the following
MOXA Pt-7828-f-24-hv Firmware<=3.9
MOXA Pt-7828-f-24-hv
All of the following
MOXA Pt-7828-f-48 Firmware<=3.9
MOXA Pt-7828-f-48
All of the following
MOXA Pt-7828-f-48-48 Firmware<=3.9
MOXA Pt-7828-f-48-48
All of the following
MOXA Pt-7828-f-48-hv Firmware<=3.9
MOXA Pt-7828-f-48-hv
All of the following
MOXA Pt-7828-f-hv Firmware<=3.9
MOXA Pt-7828-f-hv
All of the following
MOXA Pt-7828-f-hv-hv Firmware<=3.9
MOXA Pt-7828-f-hv-hv
All of the following
MOXA Pt-7828-r-24 Firmware<=3.9
MOXA Pt-7828-r-24
All of the following
MOXA Pt-7828-r-24-24 Firmware<=3.9
MOXA Pt-7828-r-24-24
All of the following
MOXA Pt-7828-r-24-hv Firmware<=3.9
MOXA Pt-7828-r-24-hv
All of the following
MOXA Pt-7828-r-48 Firmware<=3.9
MOXA Pt-7828-r-48
All of the following
MOXA Pt-7828-r-48-48 Firmware<=3.9
MOXA Pt-7828-r-48-48
All of the following
MOXA Pt-7828-r-48-hv Firmware<=3.9
MOXA Pt-7828-r-48-hv
All of the following
MOXA Pt-7828-r-hv Firmware<=3.9
MOXA Pt-7828-r-hv
All of the following
MOXA Pt-7828-r-hv-hv Firmware<=3.9
MOXA Pt-7828-r-hv-hv
Event History
Mar 24, 2020
CVE Published
via MITRE·07:16 PM
Data Sourced
via MITRE·07:16 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-6995?
The severity of CVE-2020-6995 is considered medium due to its potential for unauthorized access through weak password requirements.
2
How do I fix CVE-2020-6995?
To fix CVE-2020-6995, update the firmware of the affected Moxa PT-7528 and PT-7828 series devices to the latest versions released after the identified vulnerabilities.
3
What are the affected versions for CVE-2020-6995?
CVE-2020-6995 affects Moxa PT-7528 series firmware versions 4.0 or lower, and PT-7828 series firmware versions 3.9 or lower.
4
What devices are impacted by CVE-2020-6995?
Devices impacted by CVE-2020-6995 include various models within the Moxa PT-7528 and PT-7828 series.
5
What could happen if CVE-2020-6995 is exploited?
If exploited, CVE-2020-6995 could allow an attacker to gain unauthorized access to the vulnerable devices, potentially compromising the network.