Vulnerability Details : CVE-2023-4452
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.
Vulnerability category: OverflowDenial of service
Products affected by CVE-2023-4452
- cpe:2.3:o:moxa:edr-g902-t_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:moxa:edr-g902_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:moxa:edr-g903-t_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:moxa:edr-g903_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:moxa:edr-810-2gsfp_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:moxa:edr-810-2gsfp-t_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:moxa:edr-810-vpn-2gsfp_firmware:*:*:*:*:*:*:*:*
- cpe:2.3:o:moxa:edr-810-vpn-2gsfp-t_firmware:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2023-4452
0.08%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 35 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2023-4452
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST | |
|
6.5
|
MEDIUM | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L |
3.9
|
2.5
|
Moxa Inc. |
CWE ids for CVE-2023-4452
-
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.Assigned by:
- nvd@nist.gov (Primary)
- psirt@moxa.com (Secondary)
References for CVE-2023-4452
-
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability
EDR-810/G902/G903 Series Web Server Buffer Overflow VulnerabilityVendor Advisory
Jump to