2 lines
6.6 KiB
JSON
2 lines
6.6 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"EDR-810 Series ","vendor":"Moxa","versions":[{"lessThanOrEqual":"5.12.28","status":"affected","version":"1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"EDR G902 Series ","vendor":"Moxa","versions":[{"lessThanOrEqual":"5.7.20","status":"affected","version":"1.0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"EDR G903 Series ","vendor":"Moxa","versions":[{"lessThanOrEqual":"5.7.20","status":"affected","version":"1.0","versionType":"custom"}]}],"source":"psirt@moxa.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-g903_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AA54A9F6-8B3E-4B7F-A608-4353E6D113FA","versionEndExcluding":"5.7.21","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-g903:-:*:*:*:*:*:*:*","matchCriteriaId":"FDB89B47-4598-4F6D-951F-DF546C8CAA96","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-g903-t_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"05DBA51B-821C-4CBC-97FD-B825089A069B","versionEndExcluding":"5.7.21","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-g903-t:-:*:*:*:*:*:*:*","matchCriteriaId":"B390870B-F5C9-4F31-B19F-A81843C68DBA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-g902_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"D3EB1319-6D64-4B13-9798-3013B5D2B021","versionEndExcluding":"5.7.21","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-g902:-:*:*:*:*:*:*:*","matchCriteriaId":"66893485-6060-432C-8BA7-106CE863A674","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-g902-t_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"6371B449-C90B-4B80-8FE5-3BA3F2D4ADF8","versionEndExcluding":"5.7.21","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-g902-t:-:*:*:*:*:*:*:*","matchCriteriaId":"917B2620-0DEE-4AE8-978B-237705CAEBCB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-810-vpn-2gsfp_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"BB88BE5F-5436-4EFF-A40C-012306851FD8","versionEndExcluding":"5.12.29","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-810-vpn-2gsfp:-:*:*:*:*:*:*:*","matchCriteriaId":"846CF4C9-5218-42D5-B10D-BDBFAE7556BB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-810-vpn-2gsfp-t_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"E8261100-ECC0-44E0-AF88-D0E2F6ACE0E4","versionEndExcluding":"5.12.29","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-810-vpn-2gsfp-t:-:*:*:*:*:*:*:*","matchCriteriaId":"154A49C3-905F-412F-8CCE-E35BB67FD703","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-810-2gsfp_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"57A1AA13-FBFC-490E-B458-061562733DF0","versionEndExcluding":"5.12.29","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-810-2gsfp:-:*:*:*:*:*:*:*","matchCriteriaId":"6D800350-748B-40F1-8C28-1C4BDC2FA2CB","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:moxa:edr-810-2gsfp-t_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"AFF88114-0897-4D63-A585-E9465DA94A10","versionEndExcluding":"5.12.29","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:moxa:edr-810-2gsfp-t:-:*:*:*:*:*:*:*","matchCriteriaId":"A4668C54-FC34-47CF-A28C-233727686CA1","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot. \n"},{"lang":"es","value":"Se ha identificado una vulnerabilidad en Series EDR-810, EDR-G902 y EDR-G903, lo que las hace vulnerables a la vulnerabilidad de denegación de servicio. Esta vulnerabilidad se debe a una validación de entrada insuficiente en el URI, lo que potencialmente permite que usuarios malintencionados activen el reinicio del dispositivo."}],"id":"CVE-2023-4452","lastModified":"2026-06-17T06:37:51.587","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"exploitabilityScore":3.9,"impactScore":2.5,"source":"psirt@moxa.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":3.6,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4452","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-09-05T15:46:43.241172Z","version":"2.0.3"}}]},"published":"2023-11-01T15:15:08.803","references":[{"source":"psirt@moxa.com","tags":["Vendor Advisory"],"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability"}],"sourceIdentifier":"psirt@moxa.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-120"}],"source":"psirt@moxa.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-120"}],"source":"nvd@nist.gov","type":"Primary"}]}
|