PT-2019-3533 · Moxa · Moxa Edr-810

Publicado 2019-08-10 · Atualizado 2019-10-23 · CVE-2019-10969

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa EDR 810 versions 5.1 and prior

Description The issue allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, potentially leading to remote code execution. It is due to insufficient input validation in the web console of the Moxa EDS-810 switch's firmware, which may enable a remote attacker to execute arbitrary commands.

Recommendations For Moxa EDR 810 versions 5.1 and prior, consider disabling the ping feature as a temporary workaround until a patch is available. Restrict access to the web console to minimize the risk of exploitation. Avoid using the ping feature in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

BDU:2019-03710

CVE-2019-10969

Produtos afetados

Moxa Edr-810

Referências · 7

• 🔥 https://exploit-db.com/exploits/47536 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10969 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-03710 · Nota de Segurança
• https://us-cert.gov/ics/advisories/icsa-19-274-03 · Nota
• https://moxa.com/en/support/support/security-advisory/edr-810-series-secure-router-vulnerabilities-(1) · Nota
• http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10969 · Nota de Segurança