GCVE - cpe:2.3:o:moxa:edr-810_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:moxa:edr-810_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Moxa (`98e7f712-aaf6-5b76-a35e-6cb93ba6791f`)
Product	Edr 810 Firmware (`14c6a860-b6cd-5c23-888f-d27c4072c877`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-9139`	vulnerable	2026-06-08 07:00:26.782374	OS Command Injection in Restricted Command HIGH (7.2) The affected product permits OS command injection through improperly restricted commands, potentially allowing attackers to execute arbitrary code. Published: 2024-10-14T08:20:52.200Z Updated: 2024-11-06T20:47:06.342Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241154-missing-authentication-and-os-command-injection-vulnerabilities-in-routers-and-network-security-appliances	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10969`	vulnerable	2026-06-08 05:12:26.100761	Details available Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution. Published: 2019-10-08T18:41:28.000Z Updated: 2024-08-04T22:40:15.499Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-19-274-03 http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-10963`	vulnerable	2026-06-08 05:12:26.057990	Details available Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user. Published: 2019-10-08T18:41:43.000Z Updated: 2024-08-04T22:40:15.565Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsa-19-274-03 http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-8346`	vulnerable	2026-06-08 05:08:14.137672	Details available An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access configuration and log files (PRIVILEGE ESCALATION). Published: 2017-02-13T21:00:00.000Z Updated: 2024-08-06T02:20:30.703Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/93800 https://ics-cert.us-cert.gov/advisories/ICSA-16-294-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.