CVE-2017-13698

An issue was discovered on MOXA EDS-G512E 5.1 build 16072215 devices. An attacker could extract public and private keys from the firmware image available on the MOXA website and could use them against a production switch that has the default keys embedded.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-11-23

Last modified

2024-08-05

Affected products

• Eds-g512e Firmware (Moxa)

References

• https://www.sentryo.net/wp-content/uploads/2017/11/Switch-Moxa-Analysis.pdf