Moxa Edr-g903 Firmware vulnerabilities

9 CVEs affecting Moxa Edr-g903 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-4452, published 2023-11-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-28144, published 2021-02-03. Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days. Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series…
CVE-2016-0879, published 2016-05-31. High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days. Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive…
CVE-2012-4712, published 2013-02-15. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors.
CVE-2016-0878, published 2016-05-31. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests.
CVE-2016-0877, published 2016-05-31. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the ping function.
CVE-2016-0875, published 2016-05-31. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL.
CVE-2020-14511, published 2020-07-15. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4).
CVE-2016-0876, published 2016-05-31. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file.
CVE-2023-4452, published 2023-11-01. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input…