Moxa EDR-810 Command Injection Vulnerability (CNVD-2018-11733)

The EDR-810 is a highly integrated industrial multi-port security router with firewall/NAT/VPN and two-layer manageable switch functionality. A command injection vulnerability exists in the Web server functionality of the Moxa EDR-810 V4.1 build 17030317. The vulnerability can be exploited to...

PT-2018-5635 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A command injection issue exists in the web server functionality, allowing for privilege escalation to root shell. This can be triggered by injecting OS commands into the remoteNetmask0...