PT-2016-4437 · Moxa · Moxa Secure Router Edr-G903

Published 2016-05-31 · Updated 2022-04-12 · CVE-2016-0877

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Moxa Secure Router EDR-G903 versions prior to 3.4.12

Description A memory leak issue allows remote attackers to cause a denial of service by consuming memory, which can be achieved by executing the ping function.

Recommendations For versions prior to 3.4.12, update to version 3.4.12 or later to resolve the issue.

Fix

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-772

Related Identifiers

CVE-2016-0877

Affected Products

Moxa Secure Router Edr-G903

References · 3

• https://osv.dev/vulnerability/CVE-2016-0877 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-0877 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-16-042-01 · Note