CVE-2023-4452

published 2023-11-01

CVE-2023-4452: A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
moxa	edr-810-2gsfp-t_firmware	< 5.12.29	5.12.29
moxa	edr-810-2gsfp_firmware	< 5.12.29	5.12.29
moxa	edr-810-vpn-2gsfp-t_firmware	< 5.12.29	5.12.29
moxa	edr-810-vpn-2gsfp_firmware	< 5.12.29	5.12.29
moxa	edr-810_series	1.0 – 5.12.28	—
moxa	edr-g902-t_firmware	< 5.7.21	5.7.21
moxa	edr-g902_firmware	< 5.7.21	5.7.21
moxa	edr-g903-t_firmware	< 5.7.21	5.7.21
moxa	edr-g903_firmware	< 5.7.21	5.7.21
moxa	edr_g902_series	1.0 – 5.7.20	—
moxa	edr_g903_series	1.0 – 5.7.20	—

CWE-120