GCVE - cpe:2.3:h:moxa:edr-g903:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:moxa:edr-g903:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Moxa (`98e7f712-aaf6-5b76-a35e-6cb93ba6791f`)
Product	Edr G903 (`2f41c8ec-14fa-52a1-b6aa-c81b5a7166f9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4452`	not_vulnerable	2026-06-08 06:16:12.398226	Web Server Buffer Overflow Vulnerability MEDIUM (6.5) A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot. Published: 2023-11-01T14:24:05.658Z Updated: 2024-09-06T18:51:24.564Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34214`	vulnerable	2026-06-08 06:06:24.890077	Second Order Command-injection Vulnerability in the Certificate-generation Function HIGH (7.2) TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-generation function, which could potentially allow malicious users to execute remote code on affected devices. Published: 2023-08-17T02:26:05.428Z Updated: 2024-10-28T06:07:21.645Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33239`	vulnerable	2026-06-08 06:06:22.098506	Second Order Command-injection Vulnerability in the Key-generation Function HIGH (8.8) TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices. Published: 2023-08-17T02:13:25.280Z Updated: 2024-10-28T06:04:52.923Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230402-tn-5900-and-tn-4900-series-web-server-multiple-vulnerabilities	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-28144`	not_vulnerable	2026-06-08 05:23:53.802514	Details available Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code execution. Published: 2021-02-03T12:48:41.000Z Updated: 2024-08-04T16:33:57.712Z Open on db.gcve.eu Reference links https://www.moxa.com/en/support/support/security-advisory/edr-g903-g902-810-secure-router-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-14511`	not_vulnerable	2026-06-08 05:19:23.663604	Details available Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4). Published: 2020-07-15T12:27:24.000Z Updated: 2024-08-04T12:46:34.617Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsa-20-196-02	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0879`	not_vulnerable	2026-06-08 05:07:16.445007	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0878`	not_vulnerable	2026-06-08 05:07:16.444716	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0877`	not_vulnerable	2026-06-08 05:07:16.444406	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0876`	not_vulnerable	2026-06-08 05:07:16.444078	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-0875`	not_vulnerable	2026-06-08 05:07:16.443656	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4712`	not_vulnerable	2026-06-08 05:02:52.270734	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-4694`	vulnerable	2026-06-08 05:02:52.221026	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.