Moxa EDR-810-2GSFP Router Has Information Disclosure Vulnerability

The EDR-810-2GSFP is a router product from MOXA. An information disclosure vulnerability exists in the Moxa EDR-810-2GSFP router, which can be exploited by an attacker to obtain sensitive information...

Buffer Error Vulnerability in Multiple MOXA Products

MOXA Moxa EDR-810 and so on are the products of Taiwan Moxa MOXA company in China.Moxa EDR-810 is a security router.Moxa EDR-G903 and so on are the products of China Moxa Moxa company in China.Moxa EDR-G903 is an industrial security router device integrating firewall/NAT/VPN in one device.Moxa...

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that operations are performed outside the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the `var_NetworkSettingDhcpSvrRoute` function in the Moxa EDR-810 industrial router’s software allows a attacker to trigger an emergency shutdown of the device.

The vulnerability of the varNetworkSettingDhcpSvrRoute function in the Moxa EDR-810 industrial router’s microprogramming system is related to the lack of input data verification when accessing by using the OID identifier index. Exploiting this vulnerability can allow a malicious actor to trigger ...

The vulnerability of the var_lldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 allows a hacker to trigger an emergency shutdown of the device.

The vulnerability of the varlldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

The vulnerability of the MxConfig component of the MOXA EDR-810 industrial router allows a hacker to trigger a service failure.

The vulnerability of the MxConfig component of the MOXA EDR-810 industrial router lies in the reading of an uninitialized buffer within the stack. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by using the Scmdmoxatcpstatus service...

The vulnerability of the var_interfacestatus function in the microprogramming software for Moxa EDR-810 allows a intruder to trigger an emergency shutdown of the device.

The vulnerability of the varinterfacestatus function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

SAP Business Planning and Consolidation Cross-Site Scripting Vulnerability

SAP Business Planning and Consolidation is a business planning and consolidation software from SAP, Germany. The software provides budgeting, forecasting and financial consolidation functions. A cross-site scripting vulnerability exists in SAP Business Planning and Consolidation versions 750, 751...

NERC CIP Compliance in Azure vs. Azure Government cloud

As discussed in my last blog post on North American Electric Reliability Corporation—Critical Infrastructure Protection NERC CIP Compliance in Azure, U.S. and Canadian utilities are now free to benefit from cloud computing in Azure for many NERC CIP workloads. Machine learning, multiple data...

The vulnerability of the MOXA EDR-810 industrial router’s web server lies in the lack of a mechanism for filtering specific symbols, allowing attackers to execute arbitrary commands.

The vulnerability of the MOXA EDR-810 industrial router’s web server is related to the absence of a mechanism for filtering specific characters. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted requests to the web server...

The vulnerability of the Web GUI component of the microprogramming software for Moxa EDR-810 allows a intruder to execute arbitrary commands.

The vulnerability of the Web GUI component of the microprogramming software for Moxa EDR-810 lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created HTTP POST request...

The vulnerability of Moxa EDS-810 microcontroller-based web consoles arises from insufficient checking of input data, allowing attackers to execute arbitrary commands.

The vulnerability of Moxa EDS-810 microcontroller-based web consoles exists due to insufficient checking of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of Moxa EDS-810 microcontroller software, related to access control deficiencies, allows a intruder to disclose protected information.

The vulnerability of Moxa EDS-810 microcontroller-based software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information using specially crafted queries...

Moxa EDR-810 Command Injection / Information Disclosure

During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And the other one is an improper access control found on the w...

Moxa EDR-810 - Command Injection Information Disclosure

Moxa EDR-810 - Command Injection Information Disclosure During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And th...

Moxa EDR-810 - Command Injection / Information Disclosure

During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And the other one is an improper access control found on the w...

Moxa EDR-810 - Command Injection / Information Disclosure Vulnerabilities

During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And the other one is an improper access control found on the w...

Moxa EDR-810 Remote Code Execution Vulnerability

The Moxa EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and managed Layer 2 switch functionality. A remote code execution vulnerability exists in the Moxa EDR-810 version 5.1 and earlier. The vulnerability stems from the fact that the product allows an...

Moxa EDR-810 Information Disclosure Vulnerability (CNVD-2019-43364)

The Moxa EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and managed Layer 2 switch functionality. An information disclosure vulnerability exists in the Moxa EDR-810 version 5.1 and earlier. An attacker could exploit this vulnerability to retrieve certai...

CVE-2019-10963

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user...