CVE-2020-6995

Published: Mar 24, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

In Moxa PT-7528 series firmware, Version 4.0 or lower, and PT-7828 series firmware, Version 3.9 or lower, the application utilizes weak password requirements, which may allow an attacker to gain unauthorized access.

Affected (55)

Moxa

55 products

Pt 7528 24tx Hv Firmware

Pt 7528 24tx Hv Hv Firmware

Pt 7528 24tx Wv Firmware

Pt 7528 24tx Wv Hv Firmware

Pt 7528 24tx Wv Wv Firmware

Pt 7528 12msc 12tx 4gsfp Hv Firmware

Pt 7528 12msc 12tx 4gsfp Hv Hv Firmware

Pt 7528 12msc 12tx 4gsfp Wv Firmware

Pt 7528 12msc 12tx 4gsfp Wv Wv Firmware

Pt 7528 12mst 12tx 4gsfp Hv Firmware

Pt 7528 12mst 12tx 4gsfp Hv Hv Firmware

Pt 7528 12mst 12tx 4gsfp Wv Firmware

Pt 7528 12mst 12tx 4gsfp Wv Wv Firmware

Pt 7528 16msc 8tx 4gsfp Hv Firmware

Pt 7528 16msc 8tx 4gsfp Hv Hv Firmware

Pt 7528 16msc 8tx 4gsfp Wv Firmware

Pt 7528 16msc 8tx 4gsfp Wv Wv Firmware

Pt 7528 16mst 8tx 4gsfp Hv Firmware

Pt 7528 16mst 8tx 4gsfp Hv Hv Firmware

Pt 7528 16mst 8tx 4gsfp Wv Firmware

Pt 7528 16mst 8tx 4gsfp Wv Wv Firmware

Pt 7528 20msc 4tx 4gsfp Hv Firmware

Pt 7528 20msc 4tx 4gsfp Hv Hv Firmware

Pt 7528 20msc 4tx 4gsfp Wv Firmware

Pt 7528 20msc 4tx 4gsfp Wv Wv Firmware

Pt 7528 20mst 4tx 4gsfp Hv Firmware

Pt 7528 20mst 4tx 4gsfp Hv Hv Firmware

Pt 7528 20mst 4tx 4gsfp Wv Firmware

Pt 7528 20mst 4tx 4gsfp Wv Wv Firmware

Pt 7528 8msc 16tx 4gsfp Hv Firmware

Pt 7528 8msc 16tx 4gsfp Hv Hv Firmware

Pt 7528 8msc 16tx 4gsfp Wv Firmware

Pt 7528 8msc 16tx 4gsfp Wv Wv Firmware

Pt 7528 8mst 16tx 4gsfp Hv Firmware

Pt 7528 8mst 16tx 4gsfp Hv Hv Firmware

Pt 7528 8mst 16tx 4gsfp Wv Firmware

Pt 7528 8mst 16tx 4gsfp Wv Wv Firmware

Pt 7528 8ssc 16tx 4gsfp Hv Hv Firmware

Pt 7528 8ssc 16tx 4gsfp Wv Wv Firmware

Pt 7828 F 24 Firmware

Pt 7828 F 24 24 Firmware

Pt 7828 F 24 Hv Firmware

Pt 7828 F 48 Firmware

Pt 7828 F 48 48 Firmware

Pt 7828 F 48 Hv Firmware

Pt 7828 F Hv Firmware

Pt 7828 F Hv Hv Firmware

Pt 7828 R 24 Firmware

Pt 7828 R 24 24 Firmware

Pt 7828 R 24 Hv Firmware

Pt 7828 R 48 Firmware

Pt 7828 R 48 48 Firmware

Pt 7828 R 48 Hv Firmware

Pt 7828 R Hv Firmware

Pt 7828 R Hv Hv Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 24tx Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 24tx Hv	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 24tx Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 24tx Hv Hv	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 24tx Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 24tx Wv	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 24tx Wv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 24tx Wv Hv	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 24tx Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 24tx Wv Wv	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12msc 12tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12msc 12tx 4gsfp Hv	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12msc 12tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12msc 12tx 4gsfp Hv Hv	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12msc 12tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12msc 12tx 4gsfp Wv	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12msc 12tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12msc 12tx 4gsfp Wv Wv	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12mst 12tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12mst 12tx 4gsfp Hv	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12mst 12tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12mst 12tx 4gsfp Hv Hv	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12mst 12tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12mst 12tx 4gsfp Wv	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 12mst 12tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 12mst 12tx 4gsfp Wv Wv	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16msc 8tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16msc 8tx 4gsfp Hv	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16msc 8tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16msc 8tx 4gsfp Hv Hv	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16msc 8tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16msc 8tx 4gsfp Wv	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16msc 8tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16msc 8tx 4gsfp Wv Wv	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16mst 8tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16mst 8tx 4gsfp Hv	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16mst 8tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16mst 8tx 4gsfp Hv Hv	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16mst 8tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16mst 8tx 4gsfp Wv	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 16mst 8tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 16mst 8tx 4gsfp Wv Wv	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20msc 4tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20msc 4tx 4gsfp Hv	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20msc 4tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20msc 4tx 4gsfp Hv Hv	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20msc 4tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20msc 4tx 4gsfp Wv	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20msc 4tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20msc 4tx 4gsfp Wv Wv	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20mst 4tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20mst 4tx 4gsfp Hv	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20mst 4tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20mst 4tx 4gsfp Hv Hv	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20mst 4tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20mst 4tx 4gsfp Wv	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 20mst 4tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 20mst 4tx 4gsfp Wv Wv	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8msc 16tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8msc 16tx 4gsfp Hv	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8msc 16tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8msc 16tx 4gsfp Hv Hv	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8msc 16tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8msc 16tx 4gsfp Wv	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8msc 16tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8msc 16tx 4gsfp Wv Wv	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8mst 16tx 4gsfp Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8mst 16tx 4gsfp Hv	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8mst 16tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8mst 16tx 4gsfp Hv Hv	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8mst 16tx 4gsfp Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8mst 16tx 4gsfp Wv	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8mst 16tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8mst 16tx 4gsfp Wv Wv	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8ssc 16tx 4gsfp Hv Hv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8ssc 16tx 4gsfp Hv Hv	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7528 8ssc 16tx 4gsfp Wv Wv Firmware	Up to 4.0

Running on/with	Platform Versions
Moxa Pt 7528 8ssc 16tx 4gsfp Wv Wv	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F 24 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F 24	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F 24 24 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F 24 24	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F 24 Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F 24 Hv	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F 48 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F 48	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F 48 48 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F 48 48	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F 48 Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F 48 Hv	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F Hv	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 F Hv Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 F Hv Hv	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R 24 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R 24	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R 24 24 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R 24 24	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R 24 Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R 24 Hv	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R 48 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R 48	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R 48 48 Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R 48 48	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R 48 Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R 48 Hv	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R Hv	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Moxa Pt 7828 R Hv Hv Firmware	Up to 3.9

Running on/with	Platform Versions
Moxa Pt 7828 R Hv Hv	All versions

Related CWEs

CWE-521

Weak Password Requirements

The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

References (2)

https://www.us-cert.gov/ics/advisories/icsa-20-056-03

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.us-cert.gov/ics/advisories/icsa-20-056-03

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.