PT-2022-5107
Published
2022-02-11
·
Updated
2022-02-11
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Moxa EDR-G903 series versions (affected versions not specified)
Moxa EDR-G902 series versions (affected versions not specified)
Moxa EDR-810 series versions (affected versions not specified)
Description
The issue is related to the use of hardcoded credentials in the firmware of Moxa industrial routers. An attacker can exploit this to gain full access to the device using specially crafted credentials.
Recommendations
For Moxa EDR-G903 series: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Moxa EDR-G902 series: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
For Moxa EDR-810 series: At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾