medium6.5
CVE-2023-4452
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability.
Impact
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Edr-G903 Firmware | before 5.7.21 |
| Moxa | Edr-G903-T Firmware | before 5.7.21 |
| Moxa | Edr-G902 Firmware | before 5.7.21 |
| Moxa | Edr-G902-T Firmware | before 5.7.21 |
| Moxa | Edr-810-Vpn-2gsfp Firmware | before 5.12.29 |
| Moxa | Edr-810-Vpn-2gsfp-T Firmware | before 5.12.29 |
| Moxa | Edr-810-2gsfp Firmware | before 5.12.29 |
| Moxa | Edr-810-2gsfp-T Firmware | before 5.12.29 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability