Product support

Security Advisories

SUMMARY

EDR-G903, EDR-G902, and EDR-810 Secure Router Vulnerability

  • Version: V1.0
  • Release Date: Oct 29, 2020
  • Reference:
    • N/A

A product vulnerability was identified in Moxa’s EDR-G903, EDR-G902, and EDR-810 Series Secure Router. In response to this, Moxa has developed related solutions to address these vulnerabilities.

The identified vulnerability types and potential impacts are shown below:

Item Vulnerability Type Impact
1 Improper Restriction of Operations Crafted requests sent to the device may cause improper restriction of operations.
AFFECTED PRODUCTS AND SOLUTIONS

Affected Products:

The affected products and firmware versions are shown below.

Product Series Affected Versions
EDR-G903 Series Firmware Version 5.5 or lower
EDR-G902 Series Firmware Version 5.5 or lower
EDR-810 Series Firmware Version 5.6 or lower

 

Solutions:

Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below.

Product Series Solutions
EDR-G903 Series Please download the new firmware here.
EDR-G902 Series Please download the new firmware here.
EDR-810 Series Please download the new firmware here.

Acknowledgment:

We would like to express our appreciation to Xinjie Ma from Chaitin Security Research Lab. for reporting the vulnerability, working with us to help enhance the security of our products, and helping us provide a better service to our customers.
 

Revision History:

VERSION DESCRIPTION RELEASE DATE
1.0 First Release Oct 29, 2020

Relevant Products

EDR-810 Series · EDR-G902 Series · EDR-G903 Series ·

  •   Print this page
  • You can manage and share your saved list in My Moxa
Let’s get that fixed

If you are concerned about a potential cybersecurity vulnerability, please contact us and one of technical support staff will get in touch with you.

Report a Vulnerability
Added To Bag
Feedback