Main Vulnerability Database Vulnerabilities #VU69638

Input validation error in Moxa products - #VU69638

Published: November 28, 2022 / Updated: November 29, 2022

Vulnerability identifier: #VU69638

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can send a specially crafted HTTP/HTTPS request and perform a denial of service (DoS) attack.

Affected software

TN-4900
TN-5916
EDR-G903 Series
EDR-G902 Series
Moxa EDR-810

Remediation

Install updates from vendor's website.

TN-5916 - update to 3.3
EDR-G903 Series - update to 5.7.11
EDR-G902 Series - update to 5.7.9
Moxa EDR-810 - update to 5.12.13

External References

https://www.moxa.com/en/support/product-support/security-advisory/secure-router-edr-and-tn-series-improper-input-validation-vulnerabilities

Related Security Bulletins