Web Server Buffer Overflow Vulnerability

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• moxa edr-810-2gsfp firmwarebefore 5.12.29
• moxa edr-810-2gsfp-t firmwarebefore 5.12.29
• moxa edr-810-vpn-2gsfp firmwarebefore 5.12.29
• moxa edr-810-vpn-2gsfp-t firmwarebefore 5.12.29
• moxa edr-g902 firmwarebefore 5.7.21
• moxa edr-g902-t firmwarebefore 5.7.21
• moxa edr-g903 firmwarebefore 5.7.21
• moxa edr-g903-t firmwarebefore 5.7.21

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Moxa). Independent of NVD's CPE analysis and usually ahead of it.

• Moxa EDR G902 Series

  • 1.0 and later · up to and including 5.7.20affected

• Moxa EDR G903 Series

  • 1.0 and later · up to and including 5.7.20affected

• Moxa EDR-810 Series

  • 1.0 and later · up to and including 5.12.28affected

Other highest-scoring records for the same primary product.

• CVE-2020-28144Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 S
  40Plan
• CVE-2016-0879Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function,
  31Monitor
• CVE-2016-0878Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted pi
  31Monitor
• CVE-2016-0877Memory leak on Moxa Secure Router EDR-G903 devices before 3.4.12 allows remote attackers to cause a denial of service (memory consumption) b
  31Monitor
• CVE-2016-0875Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to read configuration and log files via a crafted URL.
  31Monitor
• CVE-2016-0876Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to discover cleartext passwords by reading a configuration file.
  30Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Root cause

When data is copied, the source length is not compared with the size of the destination buffer. Excess data overwrites adjacent memory.

A representative example of this vulnerability class. Not the vendor's source code; it shows the faulty pattern and its fix.

1char buf[256];2memcpy(buf, pkt->data, pkt->len);

1char buf[256];2if (pkt->len > sizeof(buf)) {3  return -EINVAL;4}5memcpy(buf, pkt->data, pkt->len);

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.