CVE-2020-6993

CWE-200 — Information Exposure3 documents3 sources
Severity
7.5HIGH
EPSS
0.4%
top 37.84%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
55
Moxa Pt-7528-12msc-12tx-4gsfp-hv-hv FirmwareMoxa Pt-7528-12msc-12tx-4gsfp-hv FirmwareMoxa Pt-7528-12msc-12tx-4gsfp-wv-wv Firmware+52 more
Timeline
PublishedMar 24
Latest updateMay 24

Description

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, an attacker can gain access to sensitive information from the web service without authorization.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages55 packages

🔴Vulnerability Details

2
GHSA
GHSA-qpp5-5qcc-4rmx: In Moxa PT-7528 series firmware, Version 4↗2022-05-24
▶
CVEList
CVE-2020-6993: In Moxa PT-7528 series firmware, Version 4↗2020-03-24
▶
CVE-2020-6993 (HIGH CVSS 7.5) | In Moxa PT-7528 series firmware | cvebase.io