PT-2020-3660 · Moxa · Moxa Edr-G903+1

Published 2020-07-14 · Updated 2021-09-23 · CVE-2020-14511

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa EDR-G902 versions prior to 5.4 Moxa EDR-G903 versions prior to 5.4

Description The issue is related to a stack-based buffer overflow in the system web server on the affected routers. This can be caused by a maliciously crafted web browser cookie, potentially allowing a remote attacker to execute arbitrary code. The affected routers are widely used in sectors such as oil and gas, and communal services.

Recommendations For Moxa EDR-G902 versions prior to 5.4, update to version 5.4 or later to resolve the issue. For Moxa EDR-G903 versions prior to 5.4, update to version 5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the system web server to minimize the risk of exploitation.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2020-04008

CVE-2020-14511

Affected Products

Moxa Edr-G902

Moxa Edr-G903

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2020-14511 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14511 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-04008 · Security Note
• https://t.me/ckure/5043 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-196-02 · Note
• https://t.me/rnetsec/12965 · Telegram Post
• https://t.me/cvenotify/5032 · Telegram Post
• https://t.me/defcon_news/53230 · Telegram Post
• https://moxa.com/en/support/support/security-advisory/edr-g902-g903-series-secure-routers-vulnerabilities · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14511 · Note
• https://t.me/thehackernews/786 · Telegram Post
• https://t.me/sysadm_in_channel/2028 · Telegram Post
• https://t.me/true_secator/802 · Telegram Post
• https://t.me/secharvester/9602 · Telegram Post