Moxa EDR-G903 Series
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2024-9138 | 1.0 – 5.7.25 | Privilege Escalation in Cellular Router, Secure Router, and Network Security Appliances | HIGH 8.6 | 1.1 % | ||
| CVE-2023-4452 | 1.0 – 5.7.20 | Web Server Buffer Overflow Vulnerability | HIGH 7.5 | 0.4 % | ||
| CVE-2023-34217 | 1.0 – 5.7.15 | Second Order Command-injection Vulnerability in the Certificate-delete Function | HIGH 8.1 | 0.4 % | ||
| CVE-2023-34216 | 1.0 – 5.7.15 | Second Order Command-injection Vulnerability in the Key-delete Function | HIGH 8.1 | 0.7 % | ||
| CVE-2023-34214 | 1.0 – 5.7.15 | Second Order Command-injection Vulnerability in the Certificate-generation Function | CRITICAL 9.8 | 0.4 % | ||
| CVE-2023-33239 | 1.0 – 5.7.15 | Second Order Command-injection Vulnerability in the Key-generation Function | CRITICAL 9.8 | 1.3 % | ||
| CVE-2023-33238 | 1.0 – 5.7.15 | Command-injection Vulnerability in Certificate Management | CRITICAL 9.8 | 0.8 % |