CVE-2019-10963
MEDIUMMoxa EDR-810 Firmware < 5.1 - Unauthenticated Sensitive Information Disclosure via Log File Retrieval
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-10963.
AI-analyzed exploit summary The document details two vulnerabilities in Moxa EDR-810 Series Secure Routers: a command injection in the CLI (CVE-2019-10969) allowing authenticated users to obtain root privileges via the ping feature, and an improper access control issue (CVE-2019-10963) enabling unauthenticated retrieval of log files from the web server. It includes technical details, exploitation steps, and mitigation recommendations.
Description
Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.
Exploits (1)
The document details two vulnerabilities in Moxa EDR-810 Series Secure Routers: a command injection in the CLI (CVE-2019-10969) allowing authenticated users to obtain root privileges via the ping feature, and an improper access control issue (CVE-2019-10963) enabling unauthenticated retrieval of log files from the web server. It includes technical details, exploitation steps, and mitigation recommendations.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N