The EDS-P510 Series has been enhanced to address several key vulnerabilities:

1. Modbus/TCP Coil Access: Attackers could read and analyze coil settings, which may allow them to alter device functions in SCADA and DCS environments.
2. Modbus/TCP Device Identification: Attackers could retrieve device details via Modbus MEI read requests, potentially exposing Vendor Name, Product Code, and other identifying information.
3. Unencrypted Telnet Server: Using Telnet over an unencrypted channel can expose sensitive information, such as credentials, to interception. SSH is recommended as a secure alternative.

These updates aim to improve the EDS-P510 Series’ resilience against vulnerabilities, thereby enhancing its overall security.

Vulnerability Scoring Details 

Affected Products:

The affected products and firmware versions are listed below.

Solutions:

Moxa has developed appropriate solutions to address vulnerability. The solutions for the affected products are listed below.

Mitigations:

Modbus/TCP Device Identification and Modbus/TCP Coil Access:

• Restrict access to Modbus ports using firewalls, limiting access to trusted IPs.
• Use network segmentation to isolate Modbus devices.
• Implement access controls for authorization on Modbus write functions and monitor traffic.
• Deploy application-layer firewalls to block unauthorized Modbus commands.

Unencrypted Telnet Server:

• Disable Telnet and use SSH for secure remote access.
• Restrict SSH access to trusted IP addresses.

Revision History: