Moxa Edr-g903
10 CVEs affecting Moxa Edr-g903. Latest disclosed: 2023-11-01. Critical: 2, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-28144 | Critical | 9.8 | 2021-02-03 | Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Vers… |
CVE-2020-14511 | Critical | 9.8 | 2020-07-15 | Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Rout… |
CVE-2016-0879 | High | 7.5 | 2016-05-31 | Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote… |
CVE-2016-0878 | High | 7.5 | 2016-05-31 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests. |
CVE-2016-0877 | High | 7.5 | 2016-05-31 | Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the pin… |
CVE-2016-0876 | High | 7.5 | 2016-05-31 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file. |
CVE-2016-0875 | High | 7.5 | 2016-05-31 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. |
CVE-2023-4452 | Medium | 6.5 | 2023-11-01 | A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnera… |
CVE-2012-4712 | | 2013-02-15 | Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown… | |
CVE-2012-4694 | | 2013-02-15 | Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in… |