Moxa EDR-G903 Secure Router Vulnerabilities (Update A)
This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2016-0879US | high7.5 | — | ||
Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain… | ||||
| CVE-2016-0878US | high7.5 | — | ||
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests. | ||||
| CVE-2016-0877US | high7.5 | — | ||
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the ping function. | ||||
| CVE-2016-0876US | high7.5OT elevated | — | ||
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file. | ||||
| CVE-2016-0875US | high7.5 | — | ||
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL. | ||||
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-16-042-01A JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-16-042-01A - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (5)
- MitigationEDR-G903
Moxa has created firmware version v3.4.12, and it is available to users upon request. (https://www.moxa.com/en/support/support/technical-support)
https://www.moxa.com/en/support/support/technical-support - MitigationEDR-G903
Moxa has created firmware version v3.4.12, and it is available to users upon request. (https://www.moxa.com/en/support/support/technical-support)
https://www.moxa.com/en/support/support/technical-support - MitigationEDR-G903
Moxa has created firmware version v3.4.12, and it is available to users upon request. (https://www.moxa.com/en/support/support/technical-support)
https://www.moxa.com/en/support/support/technical-support - MitigationEDR-G903
Moxa has created firmware version v3.4.12, and it is available to users upon request. (https://www.moxa.com/en/support/support/technical-support)
https://www.moxa.com/en/support/support/technical-support - MitigationEDR-G903
Moxa has created firmware version v3.4.12, and it is available to users upon request. (https://www.moxa.com/en/support/support/technical-support)
https://www.moxa.com/en/support/support/technical-support
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan