Vulnerability Description
In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text is the correct size for its buffer.
CVSS Score
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Moxa | Mds-G516E Firmware | <= 5.2 |
| Moxa | Mds-G516E | - |
Related Weaknesses (CWE)
References
- https://www.us-cert.gov/ics/advisories/icsa-20-056-04PatchThird Party AdvisoryUS Government Resource
- https://www.us-cert.gov/ics/advisories/icsa-20-056-04PatchThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2020-6999?
CVE-2020-6999 is a vulnerability with a CVSS score of 6.5 (MEDIUM). In Moxa EDS-G516E Series firmware, Version 5.2 or lower, some of the parameters in the setting pages do not ensure text is the correct size for its buffer.
How severe is CVE-2020-6999?
CVE-2020-6999 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-6999?
Check the references section above for vendor advisories and patch information. Affected products include: Moxa Mds-G516E Firmware, Moxa Mds-G516E.