CVE-2023-4452

MEDIUM

Moxa Edr-g903 Firmware < 5.7.21 - Buffer Overflow

Title source: rule

Description

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.

References (1)

[Vendor Advisory] https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability

Scores

CVSS v3 6.5

EPSS 0.0006

EPSS Percentile 18.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Classification

CWE

CWE-120

Status published

Affected Products (8)

moxa/edr-g903_firmware < 5.7.21

moxa/edr-g903-t_firmware < 5.7.21

moxa/edr-g902_firmware < 5.7.21

moxa/edr-g902-t_firmware < 5.7.21

moxa/edr-810-vpn-2gsfp_firmware < 5.12.29

moxa/edr-810-vpn-2gsfp-t_firmware < 5.12.29

moxa/edr-810-2gsfp_firmware < 5.12.29

moxa/edr-810-2gsfp-t_firmware < 5.12.29

Timeline

Published Nov 01, 2023

Tracked Since Feb 18, 2026