Moxa EDR-G9010 Series
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-3868 | 1.0 – 3.23.1 | An improper handling of the length parameter inconsistency vulnerability has been identified in Moxa’s Secure Router. Because of improper va | HIGH 8.7 | 0.4 % | ||
| CVE-2026-3867 | 1.0 – 3.23.1 ; 3.24 | An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low- | MEDIUM 6.0 | 0.2 % | ||
| CVE-2025-6950 | 1.0 – 3.14 | An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. The system employs a h | CRITICAL 9.9 | 0.6 % | ||
| CVE-2025-6949 | 1.0 – 3.14 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A critical aut | CRITICAL 9.3 | 0.5 % | ||
| CVE-2025-6894 | 1.0 – 3.14 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the | MEDIUM 5.3 | 0.6 % | ||
| CVE-2025-6893 | 1.0 – 3.14 | An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in brok | CRITICAL 9.3 | 0.7 % | ||
| CVE-2025-6892 | 1.0 – 3.14 | An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. A flaw in the API authentica | HIGH 8.7 | 0.5 % | ||
| CVE-2025-0676 | 1.0 – 3.14 | Commend Injection Leading to Privilege Escalation | HIGH 8.6 | 1.0 % | ||
| CVE-2025-0415 | 1.0 – 3.14 | Command Injection in NTP Setting | CRITICAL 9.2 | 0.5 % | ||
| CVE-2024-9140 | 1.0 – 3.13.1 | Moxa’s cellular routers, secure routers, and network security appliances are affected by a critical vulnerability, CVE-2024-9140. This vulne | CRITICAL 9.3 | 1.8 % | ||
| CVE-2024-9138 | | Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances | HIGH 8.6 | 1.1 % | ||
| CVE-2024-9139 | 1.0 – 3.12.1 | OS Command Injection in Restricted Command | HIGH 8.6 | 1.4 % | ||
| CVE-2024-9137 | 1.0 – 3.12.1 | Moxa Service Missing Authentication for Critical Function | HIGH 8.8 | 0.5 % | ||
| CVE-2023-34217 | 1.0 – 2.1 | Second Order Command-injection Vulnerability in the Certificate-delete Function | HIGH 8.1 | 0.4 % | ||
| CVE-2023-34216 | 1.0 – 2.1 | Second Order Command-injection Vulnerability in the Key-delete Function | HIGH 8.1 | 0.7 % | ||
| CVE-2023-33239 | | Second Order Command-injection Vulnerability in the Key-generation Function | CRITICAL 9.8 | 1.3 % | ||
| CVE-2023-33238 | | Command-injection Vulnerability in Certificate Management | CRITICAL 9.8 | 0.8 % |