Moxa EDR G903 Router Multiple Vulnerabilities

Moxa EDR G903 Router is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:moxa:edr-g903";...

Moxa EDR G903 Router Remote Version Detection

Detects the installed version of Moxa EDR G903 Router. This script sends an HTTP GET request and checks for the presence of Moxa EDR G903 Router from the response. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CVE-2016-0879

Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL...

CVE-2016-0879

Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL...

CVE-2016-0878

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service cold start by sending two crafted ping requests...

CVE-2016-0877

Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...

CVE-2016-0876

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

CVE-2016-0876

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

Authorization

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

CVE-2016-0875

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL...

CVE-2016-0875

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL...

CVE-2016-0878

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service cold start by sending two crafted ping requests...

CVE-2016-0877

Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...

CVE-2016-0876

CVE-2016-0876 affects Moxa EDR-G903 Secure Router (versions prior to 3.4.12). The vulnerability stems from plaintext storage of passwords in configuration files, enabling remote attackers to read cleartext passwords. Impact is remote exposure of credentials; CVSS v3 base score 7.5 (HIGH). Mitigat...

CVE-2016-0878

Summary (CVE-2016-0878) Affected: Moxa Secure Router EDR-G903 (versions before 3.4.12). Vulnerability: Remote attackers can cause a denial of service (cold start) by sending two crafted ping requests. Exploitation is remote; no user interaction required. Root cause: Denial of Service due to impro...

CVE-2016-0879

Affected device: Moxa Secure Router EDR-G903 (versions ≤3.4.11). Vulnerability: Unauthenticated access allows an attacker to download server-side configuration and log files by requesting specific URLs after performing the import function (CWE-284 / CVSSv3.1 base 7.5, remote, network). Impact: Di...

CVE-2016-0876

Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...

CVE-2016-0879

Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL...

CVE-2016-0877

CVE-2016-0877 affects Moxa EDR-G903 Secure Router devices (pre-3.4.12). The vulnerability is a memory leak in the information exposure path caused by the ping function, allowing remote attackers to cause denial of service via memory consumption. The issue is tied to a vulnerability in the device’...

CVE-2016-0875

CVE-2016-0875 affects Moxa EDR-G903 Secure Router devices (prior to firmware version 3.4.12). The vulnerability stems from improper access control that allows remote attackers to read configuration and log files by requesting a crafted URL. Public references describe affected products as EDR-G903...