CVE-2020-24053

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-08-21 · updated 2026-06-17
Weakness: CWE-798

Description

Moog EXO Series EXVF5C-2 and EXVP7C2-3 units have a hardcoded credentials vulnerability. This could cause a confidentiality issue when using the FTP, Telnet, or SSH protocols.

Affected products

Moog Exvf5C-2 Firmware: all versions
Moog Exvp7C2-3 Firmware: all versions

References

https://ioac.tv/3hy1xu6
https://ioactive.com/moog-exo-series-multiple-vulnerabilities/
https://ioac.tv/3hy1xu6
https://ioactive.com/moog-exo-series-multiple-vulnerabilities/

Get alerted when CVE-2020-24053 or the next vulnerability affects your stack