Design/Logic Flaw

2021-02-0313:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

JSON

Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code execution.

CPENameOperatorVersion
edr-810-2gsfp-t_firmwarele5.6
edr-810-2gsfp_firmwarele5.6
edr-810-vpn-2gsfp-t_firmwarele5.6
edr-810-vpn-2gsfp_firmwarele5.6
edr-g902-t_firmwarele5.5
edr-g902_firmwarele5.5
edr-g903-t_firmwarele5.5
edr-g903_firmwarele5.5

Name	Operator	Version
edr-810-2gsfp-t_firmware	le	5.6
edr-810-2gsfp_firmware	le	5.6
edr-810-vpn-2gsfp-t_firmware	le	5.6
edr-810-vpn-2gsfp_firmware	le	5.6
edr-g902-t_firmware	le	5.5
edr-g902_firmware	le	5.5
edr-g903-t_firmware	le	5.5
edr-g903_firmware	le	5.5