Moog

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Moog records in CISA KEV

No Moog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Exvf5c-2 Firmware 4 records MEDIUM Exvp7c2-3 Firmware 4 records MEDIUM

Records

4 records in Exvp7c2-3 Firmware · all components

TI-2020-14787 CVE-2020-24054 · GHSA-r7c7-43gw-hcm5

The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a…

MEDIUM 47

The administration console of the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units features a 'statusbroadcast' command that can spawn a given process repeatedly at a certain time interval as 'root'.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02554 Published 2020-08-21 No fix listed CWE-78

TI-2020-14784 CVE-2020-24051 · GHSA-phqv-63mq-6q3g

The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability…

MEDIUM 46

The Moog EXO Series EXVF5C-2 and EXVP7C2-3 units support the ONVIF interoperability IP-based physical security protocol, which requires authentication for some of its operations.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02218 Published 2020-08-21 No fix listed CWE-306

TI-2020-14785 CVE-2020-24052 · GHSA-rfhm-xwgj-v2q9

Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and…

MEDIUM 43

Several XML External Entity (XXE) vulnerabilities in the Moog EXO Series EXVF5C-2 and EXVP7C2-3 units allow remote unauthenticated users to read arbitrary files via a crafted Document Type Definition (DTD) in an XML requ…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01922 Published 2020-08-21 No fix listed CWE-611

TI-2020-14786 CVE-2020-24053 · GHSA-cg7x-2m33-2245

Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability.

LOW 35

Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01246 Published 2020-08-21 No fix listed CWE-798

Open these records in search →

Critical	3
High	1
Medium	0
Low	0
No CVSS	0