critical9.8
CVE-2020-28144
Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Vers…
Impact
Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Edr-G903 Firmware | through 5.5 |
| Moxa | Edr-G903-T Firmware | through 5.5 |
| Moxa | Edr-G902 Firmware | through 5.5 |
| Moxa | Edr-G902-T Firmware | through 5.5 |
| Moxa | Edr-810-2gsfp Firmware | through 5.6 |
| Moxa | Edr-810-2gsfp-T Firmware | through 5.6 |
| Moxa | Edr-810-Vpn-2gsfp Firmware | through 5.6 |
| Moxa | Edr-810-Vpn-2gsfp-T Firmware | through 5.6 |