As of June 15, 2022, this site no longer supports Internet Explorer. Please use another browser for the best experience on our site.
Sign In
Home Support Security Advisories Moxa’s Response Regarding SSLv2 Vulnerabilities (DROWN, CVE-2016-0800)

Product support

Security Advisories

Please sign in

Forgot your password?
Sign In
Remember Me.
Not a member? Sign up now
SUMMARY

Moxa’s Response Regarding SSLv2 Vulnerabilities (DROWN, CVE-2016-0800)

  • Security Advisory ID: MPSA-160301
  • Version: V1.2
  • Release Date: Mar 31, 2016
  • Reference:

Moxa has verified that some of its products are impacted by the SSLv2 vulnerability, CVE-2016-0800. Also known as “DROWN” vulnerability, this vulnerability could allow data, including passwords and encryption keys, to be read from affected systems.

Moxa's Cyber Security Response Team (CSRT) is fully engaged in this matter and we are taking appropriate action. If there are any updates to the status of the vulnerabilities or how these affect Moxa's products, we will provide an update immediately.

AFFECTED PRODUCTS AND SOLUTIONS

Affected Products:

The affected products and firmware versions are shown below.

Product Category Product Series Affected Versions
Controllers and I/Os ioPAC8500 Series Firmware Version 1.9 or earlier versions
ioPAC8500-IEC Series Firmware Edition 1.4 or earlier versions
ioPAC8600 Series Firmware Edition 1.2 or earlier versions
ioPAC8600-IEC Series Firmware Edition 1.2 or earlier versions
ioLogik 2500 Series Firmware Edition 2.1 or earlier versions
Protocol Gateways MGate 5101-PBM-MN Series Firmware Edition 1.1 or earlier versions
MGate 5102-PBM-PN Firmware Edition 1.2 or earlier versions
MGate 5105-MB-EIP Firmware Edition 1.1 or earlier versions
Serial Device Servers NPort W2150A/W2250A Series Firmware Edition 1.9 or earlier versions
MiiNePort W1 Series Firmware Edition 1.1 or earlier versions
NPort S8000 Firmware Edition 1.5 or earlier versions
NPort 6100/6200 Series Firmware Edition 1.13 or earlier versions
NPort 6400/6600 Series Firmware Edition 1.13 or earlier versions
Ethernet Switches










 		 EDS-505A Series Firmware Edition 3.4 or earlier versions
EDS-508A Series Firmware Edition 3.4 or earlier versions
EDS-510A Series Firmware Edition 3.4 or earlier versions
EDS-516A Series Firmware Edition 3.4 or earlier versions
EDS-518A Series Firmware Edition 3.4 or earlier versions
EDS-510E Series Firmware Edition 4.1 or earlier versions
EDS-518E Series Firmware Edition 4.1 or earlier versions
EDS-G508E Series Firmware Edition 4.2 or earlier versions
EDS-G512E Series Firmware Edition 4.2 or earlier versions
EDS-G516E Series Firmware Edition 4.2 or earlier versions
IKS-6726A Series Firmware Edition 4.1 or earlier versions
IKS-6728A Series Firmware Edition 4.1 or earlier versions
IKS-G6524A Series Firmware Edition 4.2 or earlier versions
ICS-G7526A Series Firmware Edition 4.2 or earlier versions
ICS-G7528A Series Firmware Edition 4.2 or earlier versions
ICS-G7748A Series Firmware Edition 4.2 or earlier versions
ICS-G7750A Series    Firmware Edition 4.2 or earlier versions
ICS-G7752A Series Firmware Edition 4.2 or earlier versions
IKS-G6824A Series Firmware Edition 4.5 or earlier versions
ICS-G7826A Series Firmware Edition 4.5 or earlier versions
ICS-G7828A Series Firmware Edition 4.5 or earlier versions
ICS-G7848A Series Firmware Edition 4.5 or earlier versions
ICS-G7850A Series Firmware Edition 4.5 or earlier versions
ICS-G7852A Series Firmware Edition 4.5 or earlier versions
IEX-402 Series (VDSL2 models) Firmware Edition 2.0 or earlier versions
IEX-402 Series (SHDSL models) Firmware Edition 1.0 or earlier versions
PT-508 Series Firmware Edition 3.8 or earlier versions
PT-510 Series Firmware Edition 3.8 or earlier versions
PT-G503 Series Firmware Edition 4.2 or earlier versions
PT-7710 Series Firmware Edition 3.8 or earlier versions
PT-7728 Series Firmware Edition 3.7 or earlier versions
PT-7728 Series (PTP models) Firmware Edition 3.5 or earlier versions
PT-7828 Series Firmware Edition 3.7 or earlier versions
PT-7528 Series Firmware Edition 4.0 or earlier versions
TN-4500A Series Firmware Edition 3.2 or earlier versions
TN-5500A Series (5508A/5510A models) Firmware Edition 3.6 or earlier versions
TN-5500A Series (5516A/5518A models) Firmware Edition 3.7 or earlier versions
TN-5800A Series Firmware Edition 3.5 or earlier versions
TN-5916Series Firmware Edition 1.2 or earlier versions
x86 Computers V2201 Series (Linux) Firmware Edition 1.1 or earlier versions
Arm-based Computers DA-660A Series Firmware Edition 1.1 or earlier versions
IA240 Series Firmware Edition 1.6 or earlier versions
IA260 Series (LX models) Firmware Edition 1.1 or earlier versions
IA261-I/IA262_I Series (LX models) Firmware Edition 1.1 or earlier versions
UC-7100 Series (LX Plus model) Firmware Edition 1.4 or earlier versions
UC-8410 Series (-LX models) Firmware Edition 2.1 or earlier versions
UC-8416 Series (LX models) Firmware Edition 2.1 or earlier versions
UC-8418 Series (LX models) Firmware Edition 2.1 or earlier versions
UC-8430 Series (LX models) Firmware Edition 2.1 or earlier versions
UC-8481 Series (LX models) Firmware Edition 1.4 or earlier versions
UC-8100-Series Firmware Edition 1.3 or earlier versions
UC-8410A-Series Firmware Edition 1.0 or earlier versions
EM-2260 Series (LX models) Firmware Edition 1.1 or earlier versions

 

Solutions:

Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below.

Product Category Product Series Affected Versions
Controllers and I/Os ioPAC8500 Series Please contact Moxa Technical Support for assistance
ioPAC8500-IEC Series Please contact Moxa Technical Support for assistance
ioPAC8600 Series Please contact Moxa Technical Support for assistance
ioPAC8600-IEC Series Please contact Moxa Technical Support for assistance
ioLogik 2500 Series Please download new firmware here
Protocol Gateways MGate 5101-PBM-MN Series Please download new firmware here
MGate 5102-PBM-PN Please download new firmware here
MGate 5105-MB-EIP Please download new firmware here
Serial Device Servers NPort W2150A/W2250A Series Please download new firmware here
MiiNePort W1 Series Please download new firmware here
NPort S8000 Please download new firmware here
NPort 6100/6200 Series Please download new firmware here
NPort 6400/6600 Series Please download new firmware here
Ethernet Switches










 		 EDS-505A Series Please download new firmware here
EDS-508A Series Please download new firmware here
EDS-510A Series Please download new firmware here
EDS-516A Series Please download new firmware here
EDS-518A Series Please download new firmware here
EDS-510E Series Please download new firmware here
EDS-518E Series Please download new firmware here
EDS-G508E Series Please download new firmware here
EDS-G512E Series Please download new firmware here
EDS-G516E Series Please download new firmware here
IKS-6726A Series Please download new firmware here
IKS-6728A Series Please download new firmware here
IKS-G6524A Series Please download new firmware here
ICS-G7526A Series Please download new firmware here
ICS-G7528A Series Please download new firmware here
ICS-G7748A Series Please download new firmware here
ICS-G7750A Series    Please download new firmware here
ICS-G7752A Series Please download new firmware here
IKS-G6824A Series Please download new firmware here
ICS-G7826A Series Please download new firmware here
ICS-G7828A Series Please download new firmware here
ICS-G7848A Series Please download new firmware here
ICS-G7850A Series Please download new firmware here
ICS-G7852A Series Please download new firmware here
IEX-402 Series (VDSL2 models) Please contact Moxa Technical Support for assistance
IEX-402 Series (SHDSL models) Please contact Moxa Technical Support for assistance
PT-508 Series Please contact Moxa Technical Support for assistance
PT-510 Series Please contact Moxa Technical Support for assistance
PT-G503 Series Please contact Moxa Technical Support for assistance
PT-7710 Series Please contact Moxa Technical Support for assistance
PT-7728 Series Please contact Moxa Technical Support for assistance
PT-7728 Series (PTP models) Please contact Moxa Technical Support for assistance
PT-7828 Series Please contact Moxa Technical Support for assistance
PT-7528 Series Please contact Moxa Technical Support for assistance
TN-4500A Series Please download new firmware here
TN-5500A Series (5508A/5510A models) Please contact Moxa Technical Support for assistance
TN-5500A Series (5516A/5518A models) Please contact Moxa Technical Support for assistance
TN-5800A Series Please contact Moxa Technical Support for assistance
TN-5916Series Please contact Moxa Technical Support for assistance
x86 Computers V2201 Series (Linux) Please contact Moxa Technical Support for assistance
Arm-based Computers DA-660A Series Please download new firmware here
IA240 Series Please download new firmware here
IA260 Series (LX models) Please contact Moxa Technical Support for assistance
IA261-I/IA262_I Series (LX models) Please contact Moxa Technical Support for assistance
UC-7100 Series (LX Plus model) Please download new firmware here
UC-8410 Series (-LX models) This product has been phased out, please contact Moxa Technical Support for assistance
UC-8416 Series (LX models) This product has been phased out, please contact Moxa Technical Support for assistance
UC-8418 Series (LX models) This product has been phased out, please contact Moxa Technical Support for assistance
UC-8430 Series (LX models) This product has been phased out, please contact Moxa Technical Support for assistance
UC-8481 Series (LX models) This product has been phased out, please contact Moxa Technical Support for assistance
UC-8100-Series Please download new firmware here
UC-8410A-Series Please download new firmware here
EM-2260 Series (LX models) Please contact Moxa Technical Support for assistance

 

Revision History:

VERSION DESCRIPTION RELEASE DATE
1.0 First release March 31, 2016
1.1 Updated the affected products and versions for PT-G503 Series, PT-7728 Series, PT-7728 (PTP) Series, and PT-7828 Series. Removed PT-G7509 Series, PT-G7728 Series, and PT-G7828 Series from the affected products. Added the Acknowledgement section. November 20, 2024
1.2 Removed the Acknowledgement section. November 21, 2024

Relevant Products

DA-660A Series · EDS-505A Series · EDS-508A Series · EDS-510A Series · EDS-510E Series · EDS-516A Series · EDS-518A Series · EDS-518E Series · EDS-G508E Series · EDS-G512E Series · EDS-G516E Series · EM-2260 Series · IA240 Series · IA260 Series · IA261-I/IA262-I Series · ICS-G7526A Series · ICS-G7528A Series · ICS-G7748A Series · ICS-G7750A Series · ICS-G7826A Series · ICS-G7828A Series · ICS-G7848A Series · ICS-G7850A Series · ICS-G7852A Series · IEX-402 Series · IKS-6726A Series · IKS-6728A Series · IKS-G6524A Series · IKS-G6824A Series · ioPAC 8500 Series · ioPAC 8600 Series · MGate 5101-PBM-MN Series · MGate 5102-PBM-PN Series · MGate 5105-MB-EIP Series · MiiNePort W1 Series · NPort 6100/6200 Series · NPort 6400/6600 Series · NPort S8000 Series · NPort W2150A/W2250A Series · PT-508 Series · PT-510 Series · PT-7528 Series · PT-7710 Series · PT-7728 Series · PT-7828 Series · PT-G503 Series · TN-4500A Series · TN-5500A Series · TN-5800A Series · TN-5900 Series · UC-7100 Series · UC-8100 Series · UC-8410 Series · UC-8410A Series · UC-8416/8418 Series · UC-8430 Series · UC-8481 Series · V2201 Series ·

  •   Print this page

  • Save
    You can manage and share your saved list in My Moxa
Related Advisories
Let’s get that fixed

If you are concerned about a potential cybersecurity vulnerability, please contact us and one of technical support staff will get in touch with you.

Report a Vulnerability

Do Not Share My Personal Information

To opt out of sharing your personal information for cross-context behavioral advertising, you can complete and submit the form provided below.


Please note that even if you choose to complete the form, you may still see our ads on other websites. However, these ads may not be as relevant to you as they would be if you had not opted out.

 
 
 
Added To Bag

View Bag
You have some items waiting in your bag; click here to finish your quote!

You are currently on the Global / English site.
Would you like to go to the site for your region?

Feedback