EG
Product
Edr G903 Firmware
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 0Low 0
Watch
Add Edr G903 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-28144 | 9.8 | Feb 3 | Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower,… Affected: through 5.5 |
| CVE-2020-14511 | 9.8 | Jul 15 | Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior… Affected: through 5.4 |
| CVE-2023-4452 | 7.5 | Nov 1 | Web Server Buffer Overflow Vulnerability Affected: before 5.7.21 |
| CVE-2016-0879 | 7.5 | May 31 | Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain… Affected: before 3.4.12 |
| CVE-2016-0878 | 7.5 | May 31 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests Affected: before 3.4.12 |
| CVE-2016-0877 | 7.5 | May 31 | Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the ping function Affected: before 3.4.12 |
| CVE-2016-0876 | 7.5 | May 31 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file Affected: before 3.4.12 |
| CVE-2016-0875 | 7.5 | May 31 | Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL Affected: before 3.4.12 |
| CVE-2012-4712 | – | Feb 15 | Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors Affected: before 2.11 |
| CVE-2012-4694 | – | Feb 15 | Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle… Affected: through 2.2; 1.0; 2.0; 2.1 |
Showing 10