PT-2019-3533 · Moxa · Moxa Edr-810

Published 2019-08-10 · Updated 2019-10-23 · CVE-2019-10969

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa EDR 810 versions 5.1 and prior

Description The issue allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, potentially leading to remote code execution. It is due to insufficient input validation in the web console of the Moxa EDS-810 switch's firmware, which may enable a remote attacker to execute arbitrary commands.

Recommendations For Moxa EDR 810 versions 5.1 and prior, consider disabling the ping feature as a temporary workaround until a patch is available. Restrict access to the web console to minimize the risk of exploitation. Avoid using the ping feature in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-03710

CVE-2019-10969

Affected Products

Moxa Edr-810

References · 7

• 🔥 https://exploit-db.com/exploits/47536 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10969 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03710 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-10969 · Security Note
• https://us-cert.gov/ics/advisories/icsa-19-274-03 · Note
• https://moxa.com/en/support/support/security-advisory/edr-810-series-secure-router-vulnerabilities-(1) · Note
• http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html · Note