CVE-2017-13701 An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stor...
CriticalCVSS 9.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. The backup file contains sensitive information in a insecure way. There is no salt for password hashing. Indeed passwords are stored without being ciphered with a timestamped ciphering method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Moxa eds-g512e firmware | = 5.1 | No fix listed |
References
- 101966 third-party-advisory vdb-entry
- www.sentryo.net mitigation third-party-advisory