PT-2022-5654 · Moxa · Moxa Edr-G903+4

Published

2022-11-28

·

Updated

2022-11-28

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Moxa TN-5916 versions (affected versions not specified) Moxa TN-4900 versions (affected versions not specified) Moxa EDR-G903 versions (affected versions not specified) Moxa EDR-G902 versions (affected versions not specified) Moxa EDR-810 versions (affected versions not specified)
Description The issue is related to errors in processing input data in the firmware of Moxa routers. It may allow a remote attacker to cause a denial of service by sending a specially crafted HTTP/HTTPS request.
Recommendations For Moxa TN-5916, consider restricting access to the device to minimize the risk of exploitation until a patch is available. For Moxa TN-4900, avoid using the device for critical operations until the issue is resolved. For Moxa EDR-G903, restrict access to the vulnerable module to minimize the risk of exploitation. For Moxa EDR-G902, consider disabling the vulnerable function until a patch is available. For Moxa EDR-810, restrict access to the device to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2022-07022

Affected Products

Moxa Edr-810
Moxa Edr-G902
Moxa Edr-G903
Moxa Tn-4900
Moxa Tn-5916