Vulnerability in PT-G503 Series Firmware: Implications for North East India

Overview of the Vulnerability

A recently identified vulnerability (CVE-2023-5035) affects the PT-G503 Series firmware versions prior to v5.2. This issue stems from the Secure attribute for sensitive cookies in HTTPS sessions not being set, which could potentially expose user session data to unauthorized access and manipulation.

CVSS Scores and Vulnerability Details

The Common Vulnerability Scoring System (CVSS) provides a standard for assessing the severity of cybersecurity vulnerabilities. The latest version, 4.0, classifies this vulnerability as 'Medium' (CVSS 4.0 Base Score: 5.3). However, previous versions, 3.x and 2.0, also assign lower scores (3.1 Low and N/A, respectively).

CVSS 4.0

The CVSS 4.0 assessment for this vulnerability is still pending from NVD, but the initial analysis by NIST suggests that it falls under the Attack Vector (AV) category of Network (N), Attack Complexity (AC) of Low (L), Privileges Required (PR) of None (N), User Interaction (UI) of None (N), Scope (S) of Unchanged (U), Confidentiality (C) Impact of Low (L), Integrity (I) Impact of None (N), and Availability (A) Impact of None (N).

CVSS 3.x and 2.0

The CVSS 3.x Base Score is 3.1 (Low), and the Attack Vector is Network, the Attack Complexity is High, the Privileges Required is None, the User Interaction is Required, the Scope is Unchanged, the Confidentiality Impact is Low, the Integrity Impact is None, and the Availability Impact is None. The CVSS 2.0 Base Score is yet to be provided by NVD.

Affected Software and Solutions

The vulnerability affects the Moxa EDS-G503 firmware versions up to (excluding) 5.2. Moxa Inc. has provided a Vendor Advisory, which includes details about the affected software configurations and mitigation measures.

Relevance to North East India and Broader Indian Context

Given the widespread use of Moxa's products in various industries across India, including the North East region, this vulnerability could potentially pose a security risk. Organizations using the affected PT-G503 Series devices should prioritize updating their firmware to the latest version (v5.2 or above) to mitigate the risks associated with this vulnerability.

Reflections and Future Considerations

This incident underscores the importance of maintaining up-to-date software and vigilance in the face of potential cyber threats. As more and more devices become interconnected, the potential attack surface grows, making it crucial for organizations to stay informed about security vulnerabilities and adopt best practices to protect their systems and data.