CVE-2023-4452

Web Server Buffer Overflow Vulnerability

Description

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot.

Remediation

Solution:

  • Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below. * EDR-810 Series: Please upgrade to firmware v5.12.29 or later * EDR-G902 Series: Please upgrade to firmware v5.7.21 or later * EDR-G903 Series: Please upgrade to firmware v5.7.21 or later

Category

6.5
CVSS
Severity: Medium
CVSS 3.1 •
EPSS 0.06%
Vendor Advisory moxa.com
Affected: Moxa EDR-810 Series
Affected: Moxa EDR G902 Series
Affected: Moxa EDR G903 Series
Published at:
Updated at:

References

Link Tags
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-234880-edr-810-g902-g903-series-web-server-buffer-overflow-vulnerability vendor advisory

Frequently Asked Questions

What is the severity of CVE-2023-4452?
CVE-2023-4452 has been scored as a medium severity vulnerability.
How to fix CVE-2023-4452?
To fix CVE-2023-4452: Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below. * EDR-810 Series: Please upgrade to firmware v5.12.29 or later * EDR-G902 Series: Please upgrade to firmware v5.7.21 or later * EDR-G903 Series: Please upgrade to firmware v5.7.21 or later
Is CVE-2023-4452 being actively exploited in the wild?
As for now, there are no information to confirm that CVE-2023-4452 is being actively exploited. According to its EPSS score, there is a ~0% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
What software or system is affected by CVE-2023-4452?
CVE-2023-4452 affects Moxa EDR-810 Series , Moxa EDR G902 Series , Moxa EDR G903 Series .
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.