CVE-2024-7695
Out-of-bounds Write Vulnerability
- State
- Published
- Severity
- 8.7 High
- Published
- Jan 29, 2025
- Updated
- Feb 22, 2025
- Reserved
- Aug 12, 2024
Description
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.7 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N | Moxa |
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | Moxa |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
PT-7728 SeriesMoxa |
|
PT-7828 SeriesMoxa |
|
PT-G503 SeriesMoxa |
|
PT-G510 SeriesMoxa |
|
PT-G7728 SeriesMoxa |
|
PT-G7828 SeriesMoxa |
|
EDS-608 SeriesMoxa |
|
EDS-611 SeriesMoxa |
|
EDS-616 SeriesMoxa |
|
EDS-619 SeriesMoxa |
|
EDS-405A SeriesMoxa |
|
EDS-408A SeriesMoxa |
|
EDS-505A SeriesMoxa |
|
EDS-508A SeriesMoxa |
|
EDS-510A SeriesMoxa |
|
EDS-516A SeriesMoxa |
|
EDS-518A SeriesMoxa |
|
EDS-G509 SeriesMoxa |
|
EDS-P510 SeriesMoxa |
|
EDS-P510A SeriesMoxa |
|
EDS-510E SeriesMoxa |
|
EDS-518E SeriesMoxa |
|
EDS-528E SeriesMoxa |
|
EDS-G508E SeriesMoxa |
|
EDS-G512E SeriesMoxa |
|
EDS-G516E SeriesMoxa |
|
EDS-P506E SeriesMoxa |
|
ICS-G7526A SeriesMoxa |
|
ICS-G7528A SeriesMoxa |
|
ICS-G7748A SeriesMoxa |
|
ICS-G7750A SeriesMoxa |
|
ICS-G7752A SeriesMoxa |
|
ICS-G7826A SeriesMoxa |
|
ICS-G7828A SeriesMoxa |
|
ICS-G7848A SeriesMoxa |
|
ICS-G7850A SeriesMoxa |
|
ICS-G7852A SeriesMoxa |
|
IKS-G6524A SeriesMoxa |
|
IKS-6726A SeriesMoxa |
|
IKS-6728A SeriesMoxa |
|
IKS-G6824A SeriesMoxa |
|
SDS-3006 SeriesMoxa |
|
SDS-3008 SeriesMoxa |
|
SDS-3010 SeriesMoxa |
|
SDS-3016 SeriesMoxa |
|
SDS-G3006 SeriesMoxa |
|
SDS-G3008 SeriesMoxa |
|
SDS-G3010 SeriesMoxa |
|
SDS-G3016 SeriesMoxa |
|
TN-G4500 SeriesMoxa |
|
TN-G6500 SeriesMoxa |
|
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switchesvendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switchesvendor-advisory
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switchesvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.