Vulnerabilities > Moxa > EDR G903 Firmware > 2.2

DATE CVE VULNERABILITY TITLE RISK
2023-11-01 CVE-2023-4452 Classic Buffer Overflow vulnerability in Moxa products
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability.
network
low complexity
moxa CWE-120
7.5
2016-05-31 CVE-2016-0879 Information Exposure Through Log Files vulnerability in Moxa Edr-G903 Firmware
Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain sensitive information by requesting these files at an unspecified URL.
network
low complexity
moxa CWE-532
7.8
2016-05-31 CVE-2016-0878 Unspecified vulnerability in Moxa Edr-G903 Firmware
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests.
network
low complexity
moxa
7.8
2016-05-31 CVE-2016-0877 Missing Release of Resource after Effective Lifetime vulnerability in Moxa Edr-G903 Firmware
Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) by executing the ping function.
network
low complexity
moxa CWE-772
7.8
2016-05-31 CVE-2016-0876 Cleartext Storage of Sensitive Information vulnerability in Moxa Edr-G903 Firmware
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file.
network
low complexity
moxa CWE-312
5.0
2016-05-31 CVE-2016-0875 Information Exposure Through Log Files vulnerability in Moxa Edr-G903 Firmware
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL.
network
low complexity
moxa CWE-532
5.0
2013-02-15 CVE-2012-4712 Use of Hard-coded Credentials vulnerability in Moxa Edr-G903 Firmware
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors.
network
low complexity
moxa CWE-798
5.0