CVEvulnerability
CVE-2019-10963
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-10-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-321
Description
Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.
Affected configurations
• moxa edr-810 firmware (<= 5.1)
Related
Weakness · CWE (1)
- CWE-321 Use of Hard-coded Cryptographic Key weakness
References
- http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html Exploit, Third Party Advisory, VDB Entry
- https://www.us-cert.gov/ics/advisories/icsa-19-274-03 Third Party Advisory, US Government Resource
- http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html Exploit, Third Party Advisory, VDB Entry
- https://www.us-cert.gov/ics/advisories/icsa-19-274-03 Third Party Advisory, US Government Resource