Lucene search

[email protected]NVD:CVE-2023-4452

HistoryNov 01, 2023 - 3:15 p.m.

CVE-2023-4452

2023-11-0115:15:08

CWE-120

[email protected]

web.nvd.nist.gov

edr-810

edr-g902

edr-g903

denial-of-service

input validation

uri

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

17.0%

JSON

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.

Affected configurations

Nvd

Node

moxaedr-g903Match-

AND

moxaedr-g903_firmwareRange<5.7.21

Node

moxaedr-g903-tMatch-

AND

moxaedr-g903-t_firmwareRange<5.7.21

Node

moxaedr-g902Match-

AND

moxaedr-g902_firmwareRange<5.7.21

Node

moxaedr-g902-tMatch-

AND

moxaedr-g902-t_firmwareRange<5.7.21

Node

moxaedr-810-vpn-2gsfpMatch-

AND

moxaedr-810-vpn-2gsfp_firmwareRange<5.12.29

Node

moxaedr-810-vpn-2gsfp-tMatch-

AND

moxaedr-810-vpn-2gsfp-t_firmwareRange<5.12.29

Node

moxaedr-810-2gsfpMatch-

AND

moxaedr-810-2gsfp_firmwareRange<5.12.29

Node

moxaedr-810-2gsfp-tMatch-

AND

moxaedr-810-2gsfp-t_firmwareRange<5.12.29

VendorProductVersionCPE
moxaedr-g903-cpe:2.3:h:moxa:edr-g903:-:*:*:*:*:*:*:*
moxaedr-g903_firmware*cpe:2.3:o:moxa:edr-g903_firmware:*:*:*:*:*:*:*:*
moxaedr-g903-t-cpe:2.3:h:moxa:edr-g903-t:-:*:*:*:*:*:*:*
moxaedr-g903-t_firmware*cpe:2.3:o:moxa:edr-g903-t_firmware:*:*:*:*:*:*:*:*
moxaedr-g902-cpe:2.3:h:moxa:edr-g902:-:*:*:*:*:*:*:*
moxaedr-g902_firmware*cpe:2.3:o:moxa:edr-g902_firmware:*:*:*:*:*:*:*:*
moxaedr-g902-t-cpe:2.3:h:moxa:edr-g902-t:-:*:*:*:*:*:*:*
moxaedr-g902-t_firmware*cpe:2.3:o:moxa:edr-g902-t_firmware:*:*:*:*:*:*:*:*
moxaedr-810-vpn-2gsfp-cpe:2.3:h:moxa:edr-810-vpn-2gsfp:-:*:*:*:*:*:*:*
moxaedr-810-vpn-2gsfp_firmware*cpe:2.3:o:moxa:edr-810-vpn-2gsfp_firmware:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moxa	edr-g903	-	cpe:2.3:h:moxa:edr-g903:-:::::::*
moxa	edr-g903_firmware	*	cpe:2.3:o:moxa:edr-g903_firmware::::::::
moxa	edr-g903-t	-	cpe:2.3:h:moxa:edr-g903-t:-:::::::*
moxa	edr-g903-t_firmware	*	cpe:2.3:o:moxa:edr-g903-t_firmware::::::::
moxa	edr-g902	-	cpe:2.3:h:moxa:edr-g902:-:::::::*
moxa	edr-g902_firmware	*	cpe:2.3:o:moxa:edr-g902_firmware::::::::
moxa	edr-g902-t	-	cpe:2.3:h:moxa:edr-g902-t:-:::::::*
moxa	edr-g902-t_firmware	*	cpe:2.3:o:moxa:edr-g902-t_firmware::::::::
moxa	edr-810-vpn-2gsfp	-	cpe:2.3:h:moxa:edr-810-vpn-2gsfp:-:::::::*
moxa	edr-810-vpn-2gsfp_firmware	*	cpe:2.3:o:moxa:edr-810-vpn-2gsfp_firmware::::::::