CVE-2020-14511

Name of the Vulnerable Software and Affected Versions Moxa EDR-G902 versions prior to 5.4 Moxa EDR-G903 versions prior to 5.4

Description The issue is related to a stack-based buffer overflow in the system web server on the affected routers. This can be caused by a maliciously crafted web browser cookie, potentially allowing a remote attacker to execute arbitrary code. The affected routers are widely used in sectors such as oil and gas, and communal services.

Recommendations For Moxa EDR-G902 versions prior to 5.4, update to version 5.4 or later to resolve the issue. For Moxa EDR-G903 versions prior to 5.4, update to version 5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the system web server to minimize the risk of exploitation.