34 matches found
PT-2026-47139
CVE-2026-2596 - Moxa EDR-G903: Insecure File Permissions CVE ID :CVE-2026-2596 Published : June 3, 2026, 10:19 p.m. | 47 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
EUVD-2012-4619
Malware in sbrugna...
Moxa EDR-G903 Series Routers EDR Cryptographic Issues (CVE-2012-4694)
Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for 1 SSH and 2 SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation...
Moxa EDR-810, EDR-G902, EDR-G903 Series Security Breach
MOXA Moxa EDR-810 and so on are the products of China MOXA company.Moxa EDR-810 is a security router.Moxa EDR-G903 is an industrial security router device integrating firewall/NAT/VPN.Moxa EDR-G902 is an industrial security router device integrating firewall/NAT/VPN.Moxa EDR-G902 is an industrial...
Moxa EDR-G903 Secure Router Information Exposure (CVE-2016-0877)
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Moxa EDR-G903 Secure Router Unauthenticated File Download (CVE-2016-0879)
Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL. This plugin only works with Tenable.ot. Please...
Moxa EDR-G903 series Hard-coded Credentials (CVE-2012-4712)
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
PT-2022-5654 · Moxa · Moxa Edr-G903 +4
Name of the Vulnerable Software and Affected Versions: Moxa TN-5916 versions affected versions not specified Moxa TN-4900 versions affected versions not specified Moxa EDR-G903 versions affected versions not specified Moxa EDR-G902 versions affected versions not specified Moxa EDR-810 versions...
PT-2022-5107
Name of the Vulnerable Software and Affected Versions Moxa EDR-G903 series versions affected versions not specified Moxa EDR-G902 series versions affected versions not specified Moxa EDR-810 series versions affected versions not specified Description The issue is related to the use of hardcoded...
PT-2022-5304
Name of the Vulnerable Software and Affected Versions Moxa EDR-G903 versions affected versions not specified Moxa EDR-G902 versions affected versions not specified Moxa EDR-810 versions affected versions not specified Description The issue is related to a lack of memory release when handling a...
PT-2020-4731
Name of the Vulnerable Software and Affected Versions: Moxa EDR-G902 affected versions not specified Moxa EDR-G903 affected versions not specified Moxa EDR-810 affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote...
Industrial VPN Flaws Could Let Attackers Target Critical Infrastructures
Cybersecurity researchers have discovered critical vulnerabilities in industrial VPN implementations primarily used to provide remote access to operational technology OT networks that could allow hackers to overwrite data, execute malicious code, and compromise industrial control systems ICS. A n...
PT-2020-3660
Name of the Vulnerable Software and Affected Versions Moxa EDR-G902 versions prior to 5.4 Moxa EDR-G903 versions prior to 5.4 Description The issue is related to a stack-based buffer overflow in the system web server on the affected routers. This can be caused by a maliciously crafted web browser...
PT-2020-3067
Name of the Vulnerable Software and Affected Versions Moxa EDR-G902 and EDR-G903 affected versions not specified Description The issue is related to a buffer overflow in the stack of the firmware of Moxa EDR-G902 and EDR-G903 switches. Exploitation of this issue could allow a remote attacker to...
Moxa EDR G903 Router Multiple Vulnerabilities
Moxa EDR G903 Router is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/h:moxa:edr-g903";...
CVE-2016-0879
Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL...
CVE-2016-0877
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service memory consumption by executing the ping function...
CVE-2016-0876
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file...
CVE-2016-0875
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL...
Moxa EDR-G903 Information Disclosure Vulnerability
Moxa EDR-G903 is a suite of Moxa's all-in-one firewall/VPN security router products. A security vulnerability exists in Moxa EDR-G903 V3.4.11 and earlier versions. The vulnerability can be exploited by a remote attacker to obtain plaintext passwords in configuration files...