9.8
CVSSv3

CVE-2020-28144

Published: 03/02/2021 Updated: 05/02/2021
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code execution.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

moxa edr-g903_firmware

moxa edr-g903-t_firmware

moxa edr-g902_firmware

moxa edr-g902-t_firmware

moxa edr-810-2gsfp_firmware

moxa edr-810-2gsfp-t_firmware

moxa edr-810-vpn-2gsfp_firmware

moxa edr-810-vpn-2gsfp-t_firmware