The vulnerability of Moxa EDR-810 microcontroller software lies in the use and storage of the cryptographic key in an unencrypted form, allowing attackers to exploit their privileges.

The vulnerability of Moxa EDR-810 microcontroller-based software lies in the use and storage of the cryptographic key in an unencrypted form. Exploiting this vulnerability allows a remote attacker to gain increased privileges...

The vulnerability of Moxa EDR-810 microcontroller software lies in the lack of measures taken to neutralize special elements used in the OS command sequence, allowing a perpetrator to execute arbitrary code.

The vulnerability of Moxa EDR-810 microcontroller-based software relates to the lack of measures taken to neutralize special elements used in the OS command sequence. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of Moxa EDR-810 microcontroller software, related to buffer overflow in the stack, allows a hacker to execute arbitrary code.

The vulnerability of Moxa EDR-810 microcontroller-based software is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-28144

Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code...

CVE-2020-28144

The CVE-2020-28144 entry concerns Moxa EDR-G903 (Firmware ≤ 5.5), EDR-G902 (Firmware ≤ 5.5), and EDR-810 (Firmware ≤ 5.6). The vulnerability is due to an improper restriction of operations, where crafted requests may enable remote arbitrary code execution. The connected sources confirm the affect...

Buffer Error Vulnerability in Multiple MOXA Products

MOXA Moxa EDR-810 and so on are the products of Taiwan Moxa MOXA company in China.Moxa EDR-810 is a security router.Moxa EDR-G903 and so on are the products of China Moxa Moxa company in China.Moxa EDR-G903 is an industrial security router device integrating firewall/NAT/VPN in one device.Moxa...

Moxa EDR-810-2GSFP Router Has Information Disclosure Vulnerability

The EDR-810-2GSFP is a router product from MOXA. An information disclosure vulnerability exists in the Moxa EDR-810-2GSFP router, which can be exploited by an attacker to obtain sensitive information...

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that operations are performed outside the buffer in memory, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of Moxa EDR-G902, Moxa EDR-G903, and Moxa EDR-810 microprogrammed router software lies in the fact that the operation data is written outside the buffer in memory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the var_interfacestatus function in the microprogramming software for Moxa EDR-810 allows a intruder to trigger an emergency shutdown of the device.

The vulnerability of the varinterfacestatus function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

The vulnerability of the `var_NetworkSettingDhcpSvrRoute` function in the Moxa EDR-810 industrial router’s software allows a attacker to trigger an emergency shutdown of the device.

The vulnerability of the varNetworkSettingDhcpSvrRoute function in the Moxa EDR-810 industrial router’s microprogramming system is related to the lack of input data verification when accessing by using the OID identifier index. Exploiting this vulnerability can allow a malicious actor to trigger ...

The vulnerability of the MxConfig component of the MOXA EDR-810 industrial router allows a hacker to trigger a service failure.

The vulnerability of the MxConfig component of the MOXA EDR-810 industrial router lies in the reading of an uninitialized buffer within the stack. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by using the Scmdmoxatcpstatus service...

The vulnerability of the var_lldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 allows a hacker to trigger an emergency shutdown of the device.

The vulnerability of the varlldpLocalPortTbl function in the microprogramming software for Moxa EDR-810 is related to character processing errors. Exploiting this vulnerability can allow a malicious actor to trigger an emergency shutdown by sending a specially crafted SNMP request with a negative...

The vulnerability of the MOXA EDR-810 industrial router’s web server lies in the lack of a mechanism for filtering specific symbols, allowing attackers to execute arbitrary commands.

The vulnerability of the MOXA EDR-810 industrial router’s web server is related to the absence of a mechanism for filtering specific characters. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by sending specially crafted requests to the web server...

The vulnerability of the Web GUI component of the microprogramming software for Moxa EDR-810 allows a intruder to execute arbitrary commands.

The vulnerability of the Web GUI component of the microprogramming software for Moxa EDR-810 lies in insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially created HTTP POST request...

Moxa EDR-810 Command Injection / Information Disclosure

During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And the other one is an improper access control found on the w...

Moxa EDR-810 - Command Injection / Information Disclosure Vulnerabilities

During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And the other one is an improper access control found on the w...

Moxa EDR-810 - Command Injection / Information Disclosure

During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And the other one is an improper access control found on the w...

Moxa EDR-810 - Command Injection Information Disclosure

Moxa EDR-810 - Command Injection Information Disclosure During an engagement for a client, RandoriSec found 2 vulnerabilities on Moxa EDR-810 Series Secure Routers. The first one is a command injection vulnerability found on the CLI allowing an authenticated user to obtain root privileges. And th...

Moxa EDR-810 Information Disclosure Vulnerability (CNVD-2019-43364)

The Moxa EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and managed Layer 2 switch functionality. An information disclosure vulnerability exists in the Moxa EDR-810 version 5.1 and earlier. An attacker could exploit this vulnerability to retrieve certai...

Moxa EDR-810 Remote Code Execution Vulnerability

The Moxa EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and managed Layer 2 switch functionality. A remote code execution vulnerability exists in the Moxa EDR-810 version 5.1 and earlier. The vulnerability stems from the fact that the product allows an...