Vulnerability · Published Jan 29, 2025 · Assigned by Moxa
CVE-2024-7695Out-of-bounds Write Vulnerability
High 7.5
In plain English
A high-severity out-of-bounds write in EDS-405A Series from Moxa. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.7%top 46.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Moxa | PT-7728 Series | 1.0 – through 3.9 |
| Moxa | PT-7828 Series | 1.0 – through 4.0 |
| Moxa | PT-G503 Series | 1.0 – through 5.3 |
| Moxa | PT-G510 Series | 1.0 – through 6.5 |
| Moxa | PT-G7728 Series | 1.0 – through 6.4 |
| Moxa | PT-G7828 Series | 1.0 – through 6.4 |
| Moxa | EDS-608 Series | 1.0 – through 3.12 |
| Moxa | EDS-611 Series | 1.0 – through 3.12 |
| Moxa | EDS-616 Series | 1.0 – through 3.12 |
| Moxa | EDS-619 Series | 1.0 – through 3.12 |
| Moxa | EDS-405A Series | 1.0 – through 3.14 |
| Moxa | EDS-408A Series | 1.0 – through 3.12 |
| Moxa | EDS-505A Series | 1.0 – through 3.11 |
| Moxa | EDS-508A Series | 1.0 – through 3.11 |
| Moxa | EDS-510A Series | 1.0 – through 3.12 |
| Moxa | EDS-516A Series | 1.0 – through 3.11 |
| Moxa | EDS-518A Series | 1.0 – through 3.11 |
| Moxa | EDS-G509 Series | 1.0 – through 3.10 |
| Moxa | EDS-P510 Series | 1.0 – through 3.11 |
| Moxa | EDS-P510A Series | 1.0 – through 3.11 |
| Moxa | EDS-510E Series | 1.0 – through 5.5 |
| Moxa | EDS-518E Series | 1.0 – through 6.3 |
| Moxa | EDS-528E Series | 1.0 – through 6.3 |
| Moxa | EDS-G508E Series | 1.0 – through 6.4 |
| Moxa | EDS-G512E Series | 1.0 – through 6.4 |
| Moxa | EDS-G516E Series | 1.0 – through 6.4 |
| Moxa | EDS-P506E Series | 1.0 – through 5.8 |
| Moxa | ICS-G7526A Series | 1.0 – through 5.10 |
| Moxa | ICS-G7528A Series | 1.0 – through 5.10 |
| Moxa | ICS-G7748A Series | 1.0 – through 5.9 |
Weakness: CWE-787 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switches vendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switches vendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switches vendor-advisory