CVE-2020-14511

🗓️ 15 Jul 2020 12:27:24Reported by icscertType

Buffer overflow via crafted web browser cookie in EDR-G902/G903 Routers (v<5.4)

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	Remote Code Execution Vulnerabilities in Secomea, Moxa, and HMS eWon VPNs	21 Dec 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-14511	15 Jul 202000:00	–	attackerkb
Circl	CVE-2020-14511	29 Jul 202013:18	–	circl
CNVD	Moxa EDR-G902 and EDR-G903 Stack Buffer Overflow Vulnerability	27 Jul 202000:00	–	cnvd
Cvelist	CVE-2020-14511	15 Jul 202012:27	–	cvelist
EUVD	EUVD-2020-6647	7 Oct 202500:30	–	euvd
ICS	Moxa EDR-G902 and EDR-G903 Series Routers	14 Jul 202000:00	–	ics
NVD	CVE-2020-14511	15 Jul 202013:15	–	nvd
Prion	Stack overflow	15 Jul 202013:15	–	prion
RedhatCVE	CVE-2020-14511	22 May 202516:20	–	redhatcve

NVD

Vulners

Node

moxa edr-g902-t_firmwareRange≤5.4

AND

moxa edr-g902-tMatch-

Node

moxa edr-g902_firmwareRange≤5.4

AND

moxa edr-g902Match-

Node

moxa edr-g903-t_firmwareRange≤5.4

AND

moxa edr-g903-tMatch-

Node

moxa edr-g903_firmwareRange≤5.4

AND

moxa edr-g903Match-

[
  {
    "product": "EDR-G902 and EDR-G903 Series Routers",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 5.4"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-196-02

21 Nov 2024 05:03Current

9.5High risk

Vulners AI Score9.5

CVSS 27.5

CVSS 3.19.8

EPSS0.00307