Detections
Analytics
Moxa EDR-G902 and EDR-G903 Series Routers Stack-Based Buffer Overflow (CVE-2020-14511)
critical Tenable OT Security Plugin ID 501473
Synopsis
The remote OT asset is affected by a vulnerability.Description
Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4).This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.
Solution
The following text was originally created by the Cybersecurity and Infrastructure Security Agency (CISA). The original can be found at CISA.gov.Moxa recommends users implement the following to mitigate the vulnerability:
- Install firmware patch. Patches may be downloaded from Moxa’s security advisory page.
Please see Moxa’s security advisory for more information.
See Also
Plugin Details
Severity: Critical
ID: 501473
Version: 1.8
Type: remote
Family: Tenable.ot
Published: 8/2/2023
Updated: 11/25/2024
Supported Sensors: Tenable OT Security
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Score Source: CVE-2020-14511
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/o:moxa:edr-g903_firmware, cpe:/o:moxa:edr-g903-t_firmware, cpe:/o:moxa:edr-g902-t_firmware, cpe:/o:moxa:edr-g902_firmware
Required KB Items: Tenable.ot/Moxa
Exploit Ease: No known exploits are available
Patch Publication Date: 7/15/2020
Vulnerability Publication Date: 7/15/2020
Reference Information
CVE: CVE-2020-14511