Description
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command-injection vulnerability. This vulnerability stems from insufficient input validation in the certificate-delete function, which could potentially allow malicious users to delete arbitrary files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Moxa | TN-5900 Series | 1.0 – ≤ 3.3 | — |
| Moxa | TN-4900 Series | 1.0 – ≤ 1.2.4 | — |
| Moxa | EDR-G902 Series | 1.0 – ≤ 5.7.17 | — |
| Moxa | EDR-G903 Series | 1.0 – ≤ 5.7.15 | — |
| Moxa | EDR-G9010 Series | 1.0 – ≤ 2.1 | — |
| Moxa | NAT-102 Series | 1.0 – ≤ 1.0.3 | — |
Advisories 1
- WID-SEC-2023-2089 Moxa Router: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 16, 2023