PT-2018-3567 · Moxa · Moxa Edr-810

Published

2018-07-31

·

Updated

2018-07-31

CVSS v2.0

5.5

Medium

VectorAV:A/AC:L/Au:S/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 (affected versions not specified)
Description: The issue is related to errors in handling signed types in the var interfacestatus function of the Moxa EDR-810 industrial router's firmware. It can be exploited by a remote attacker using a specially crafted SNMP request with an identifier that has a negative last value, potentially causing the system to crash.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Underflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2020-04916

Affected Products

Moxa Edr-810