cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2023-4452,https://securityvulnerability.io/vulnerability/CVE-2023-4452,Web Server Buffer Overflow Vulnerability,"A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot. ",Moxa,"Edr-810 Series,Edr G902 Series,Edr G903 Series",6.5,MEDIUM,0.0007800000021234155,false,,false,false,false,,,false,false,,2023-11-01T15:15:00.000Z,0 CVE-2023-34216,https://securityvulnerability.io/vulnerability/CVE-2023-34216,Second Order Command-injection Vulnerability in the Key-delete Function,"The Moxa TN-4900 and TN-5900 Series firmware prior to specified versions contain a command injection vulnerability linked to insufficient input validation in the key-delete function. This flaw allows unauthorized users to execute arbitrary commands, which could result in the deletion of any file on the affected system. Users are advised to upgrade to the latest firmware versions to mitigate potential risks.",Moxa,"Tn-5900 Series,Tn-4900 Series,Edr-g902 Series,Edr-g903 Series,Edr-g9010 Series,Nat-102 Series",8.1,HIGH,0.000750000006519258,false,,false,false,false,,,false,false,,2023-08-17T07:15:00.000Z,0 CVE-2023-34217,https://securityvulnerability.io/vulnerability/CVE-2023-34217,Second Order Command-injection Vulnerability in the Certificate-delete Function,"The TN-4900 and TN-5900 Series firmware prior to version v1.2.4 and v3.3 respectively are affected by a command-injection vulnerability due to inadequate input validation in the certificate-delete function. This flaw allows malicious actors to potentially delete arbitrary files from the affected devices, posing a significant risk to the integrity and functionality of the systems.",Moxa,"Tn-5900 Series,Tn-4900 Series,Edr-g902 Series,Edr-g903 Series,Edr-g9010 Series,Nat-102 Series",8.1,HIGH,0.000750000006519258,false,,false,false,false,,,false,false,,2023-08-17T07:15:00.000Z,0 CVE-2023-33239,https://securityvulnerability.io/vulnerability/CVE-2023-33239,Second Order Command-injection Vulnerability in the Key-generation Function,"The TN-4900 and TN-5900 Series firmware from Moxa is susceptible to a command injection vulnerability due to inadequate input validation in the key-generation process. Malicious users can exploit this weakness to execute arbitrary commands remotely, posing significant risks to the affected devices' integrity and security.",Moxa,"Tn-5900 Series,Tn-4900 Series,Edr-810 Series,Edr-g902 Series,Edr-g903 Series,Edr-g9010 Series,Nat-102 Series",9.8,CRITICAL,0.0015999999595806003,false,,false,false,false,,,false,false,,2023-08-17T03:15:00.000Z,0 CVE-2023-33238,https://securityvulnerability.io/vulnerability/CVE-2023-33238,Command-injection Vulnerability in Certificate Management,"The TN-4900 and TN-5900 Series firmware from Moxa contains a command injection vulnerability due to insufficient input validation within the certificate management function. This flaw allows attackers to potentially execute arbitrary commands remotely on the affected devices, posing significant security risks that could compromise device integrity and data confidentiality.",Moxa,"Tn-5900 Series,Tn-4900 Series,Edr-810 Series,Edr-g902 Series,Edr-g903 Series,Edr-g9010 Series,Nat-102 Series",9.8,CRITICAL,0.0008699999889358878,false,,false,false,false,,,false,false,,2023-08-17T03:15:00.000Z,0 CVE-2023-34214,https://securityvulnerability.io/vulnerability/CVE-2023-34214,Second Order Command-injection Vulnerability in the Certificate-generation Function,"The command injection vulnerability in Moxa's TN-4900 and TN-5900 Series firmware arises from inadequate input validation within the certificate-generation function. This flaw can be exploited by malicious users to execute arbitrary commands remotely on the affected devices, posing a significant security risk. Users are urged to update to the latest firmware versions to mitigate this threat.",Moxa,"Tn-5900 Series,Tn-4900 Series,Edr-810 Series,Edr-g902 Series,Edr-g903 Series",9.8,CRITICAL,0.0011500000255182385,false,,false,false,false,,,false,false,,2023-08-17T03:15:00.000Z,0 CVE-2020-14511,https://securityvulnerability.io/vulnerability/CVE-2020-14511,,Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4).,Moxa,Edr-g902 And Edr-g903 Series Routers,9.8,CRITICAL,0.0053400001488626,false,,false,false,false,,,false,false,,2020-07-15T12:27:24.000Z,0