Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

21 records

Vendor: Moxa Component: Edr-810 Firmware Clear all filters
TI-2019-08188 CVE-2019-10969 · GHSA-vj73-6vqh-xccv

Improper input validation in Moxa EDR 810

Priority MEDIUM 44

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.10622 Published 2019-10-08 No fix listed CWE-20
TI-2018-11662 CVE-2018-16282 · GHSA-6xc3-4939-rjv8

A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2…

Priority MEDIUM 46

A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/net_…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05251 Published 2018-09-20 No fix listed CWE-78
TI-2017-10546 CVE-2017-14439 · GHSA-7v9w-wvcc-rp5c

Improper input validation in Talos Moxa

Priority LOW 36

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01776 Published 2018-05-14 No fix listed CWE-20
TI-2017-10545 CVE-2017-14438 · GHSA-2rxv-434v-p63q

Improper input validation in Talos Moxa

Priority LOW 37

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01855 Published 2018-05-14 No fix listed CWE-20
TI-2017-10544 CVE-2017-14437 · GHSA-7xgq-gwww-x5c6

NULL pointer dereference in Talos Moxa

Priority LOW 37

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02115 Published 2018-05-14 No fix listed CWE-476
TI-2017-10543 CVE-2017-14436 · GHSA-6444-6h76-2fx4

NULL pointer dereference in Talos Moxa

Priority LOW 37

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02115 Published 2018-05-14 No fix listed CWE-476
TI-2017-10542 CVE-2017-14435 · GHSA-hwvw-78mc-v67r

NULL pointer dereference in Talos Moxa

Priority LOW 37

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02115 Published 2018-05-14 No fix listed CWE-476
TI-2017-10541 CVE-2017-14434 · GHSA-h522-79gf-rp4c

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04136 Published 2018-05-14 No fix listed CWE-78
TI-2017-10540 CVE-2017-14433 · GHSA-hrxh-pxp2-7h7h

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04448 Published 2018-05-14 No fix listed CWE-78
TI-2017-10539 CVE-2017-14432 · GHSA-r983-jx22-f3fr

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04136 Published 2018-05-14 No fix listed CWE-78
TI-2017-08922 CVE-2017-12129 · GHSA-rf4h-9cj8-vph5

Broken or risky cryptographic algorithm in Talos Moxa

Priority LOW 36

An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00625 Published 2018-05-14 No fix listed CWE-327
TI-2017-08921 CVE-2017-12128 · GHSA-xw39-p8g9-hq9j

Information disclosure in Talos Moxa

Priority MEDIUM 60

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.40116 Published 2018-05-14 No fix listed CWE-200
TI-2017-08920 CVE-2017-12127 · GHSA-xq97-wjxv-m4j7

Insufficiently protected credentials in Talos Moxa

Priority LOW 21

A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00425 Published 2018-05-14 No fix listed CWE-522
TI-2017-08919 CVE-2017-12126 · GHSA-5jr9-r58p-jc88

Cross-site request forgery in Talos Moxa

Priority MEDIUM 40

An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00976 Published 2018-05-14 No fix listed CWE-352
TI-2017-08918 CVE-2017-12125 · GHSA-3p5q-5ghh-h456

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03962 Published 2018-05-14 No fix listed CWE-78
TI-2017-08917 CVE-2017-12124 · GHSA-c6f7-8cjh-69hm

Improper input validation in Talos Moxa

Priority LOW 32

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01818 Published 2018-05-14 No fix listed CWE-20
TI-2017-08916 CVE-2017-12123 · GHSA-q73q-mh85-fcv8

Insufficiently protected credentials in Talos Moxa

Priority MEDIUM 40

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01013 Published 2018-05-14 No fix listed CWE-522
TI-2017-08914 CVE-2017-12121 · GHSA-7cj3-pvh2-r7mg

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04262 Published 2018-05-14 No fix listed CWE-78
TI-2017-08913 CVE-2017-12120 · GHSA-5p7m-fwc2-2ggr

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04262 Published 2018-05-14 No fix listed CWE-78