Filtered by vendor Moxa Subscriptions
Filtered by product Edr-810 Subscriptions
Total 24 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2016-8346 1 Moxa 3 Edr-810, Edr-810-vpn, Edr-810 Firmware 2024-08-06 N/A
An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access configuration and log files (PRIVILEGE ESCALATION).
CVE-2018-16282 1 Moxa 2 Edr-810, Edr-810 Firmware 2024-08-05 N/A
A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/net_WebCADELETEGetValue URI.
CVE-2019-10963 1 Moxa 2 Edr-810, Edr-810 Firmware 2024-08-04 4.3 Medium
Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.
CVE-2019-10969 1 Moxa 2 Edr-810, Edr-810 Firmware 2024-08-04 7.2 High
Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution.