High severity · published Jan 29, 2025
CVE-2024-7695
Out-of-bounds Write Vulnerability
7.5
CVSS
0.7%
EPSS
No
On KEV
Description
Multiple switches are affected by an out-of-bounds write vulnerability. This vulnerability is caused by insufficient input validation, which allows data to be written to memory outside the bounds of the buffer. Successful exploitation of this vulnerability could result in a denial-of-service attack.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
EDS-405A Series · Moxa
1.0 through 3.14 · source: vendor
ES
EDS-408A Series · Moxa
1.0 through 3.12 · source: vendor
ES
EDS-505A Series · Moxa
1.0 through 3.11 · source: vendor
ES
EDS-508A Series · Moxa
1.0 through 3.11 · source: vendor
ES
EDS-510A Series · Moxa
1.0 through 3.12 · source: vendor
ES
EDS-510E Series · Moxa
1.0 through 5.5 · source: vendor
ES
EDS-516A Series · Moxa
1.0 through 3.11 · source: vendor
ES
EDS-518A Series · Moxa
1.0 through 3.11 · source: vendor
ES
EDS-518E Series · Moxa
1.0 through 6.3 · source: vendor
ES
EDS-528E Series · Moxa
1.0 through 6.3 · source: vendor
ES
EDS-608 Series · Moxa
1.0 through 3.12 · source: vendor
ES
EDS-611 Series · Moxa
1.0 through 3.12 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-7695
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-7695
www.moxa.com
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240162-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-multiple-pt-switches
www.moxa.com
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240163-cve-2024-7695-out-of-bounds-write-vulnerability-in-multiple-eds,-ics,-iks,-and-sds-switches
www.moxa.com
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-240164-cve-2024-7695-out-of-bounds-write-vulnerability-identified-in-en-50155-switches
More from EDS-405A Series
7.5
CVE-2024-9404
Denial-of-Service Vulnerability