Moxa
Moxa Edr-810 Firmware: vulnerabilidades y CVE
Moxa Edr-810 Firmware tiene 21 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE21
Últimos 12 meses0
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2019-10969 | Alta (7.2) | 11% | — | 8 oct 2019 | Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution. |
| CVE-2019-10963 | Media (4.3) | 6.5% | — | 8 oct 2019 | Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been… |
| CVE-2018-16282 | Alta (8.8) | 5.3% | — | 20 sept 2018 | A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the… |
| CVE-2017-14439 | Alta (7.5) | 1.7% | — | 14 may 2018 | Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet… |
| CVE-2017-14438 | Alta (7.5) | 1.8% | — | 14 may 2018 | Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet… |
| CVE-2017-14437 | Alta (7.5) | 2.2% | — | 14 may 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of… |
| CVE-2017-14436 | Alta (7.5) | 2.2% | — | 14 may 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of… |
| CVE-2017-14435 | Alta (7.5) | 2.2% | — | 14 may 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of… |
| CVE-2017-14434 | Alta (8.8) | 4.1% | — | 14 may 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An… |
| CVE-2017-14433 | Alta (8.8) | 4.4% | — | 14 may 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An… |
| CVE-2017-14432 | Alta (8.8) | 4.1% | — | 14 may 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An… |
| CVE-2017-12129 | Alta (8) | 0.64% | — | 14 may 2018 | An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them. |
| CVE-2017-12128 | Alta (7.5) | 41% | — | 14 may 2018 | An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An attacker can send a… |
| CVE-2017-12127 | Media (4.4) | 0.43% | — | 14 may 2018 | A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device. |
| CVE-2017-12126 | Alta (8.8) | 1.00% | — | 14 may 2018 | An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP packet can cause cross-site request forgery. An attacker can… |
| CVE-2017-12125 | Alta (8.8) | 4.0% | — | 14 may 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An… |
| CVE-2017-12124 | Media (6.5) | 1.9% | — | 14 may 2018 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server… |
| CVE-2017-12123 | Alta (8.8) | 1.0% | — | 14 may 2018 | An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password… |
| CVE-2017-12121 | Alta (8.8) | 4.3% | — | 14 may 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An… |
| CVE-2017-12120 | Alta (8.8) | 4.3% | — | 14 may 2018 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation, resulting in a root shell. An… |
| CVE-2016-8346 | Alta (7.5) | 2.1% | — | 13 feb 2017 | An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access configuration and log files (PRIVILEGE… |