Information Disclosure Vulnerability in Moxa EDR 810 Device
CVE-2019-10963

4.3MEDIUM

Key Information:

Vendor
Moxa
Vendor
CVE Published:
8 October 2019

Summary

The Moxa EDR 810 device, specifically in versions 5.1 and earlier, contains a vulnerability that permits an unauthenticated user to retrieve exported log files from the device. This security flaw can lead to the disclosure of sensitive information, as these log files may contain information that is critical to the device's operation and could potentially be exploited by malicious actors. It is important for users of affected versions to implement immediate security measures to mitigate this risk.

Affected Version(s)

Moxa EDR 810 All versions 5.1 and prior

References

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.