CVE-2020-28144
9.8
CRITICAL · CVSS 3.1 · EPSS 2.6% (pctl 85)
In your normal cycle
Critical by CVSS (9.8), but no sign of active exploitation.
Description
Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower. Crafted requests sent to the device may allow remote arbitrary code execution.
Scoring
| CVSS | 9.8 (CRITICAL, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 2.61% — more likely to be exploited than 85% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2021-02-03 |
| Last modified | 2026-06-17 |
Affected (16)
| Vendor | Product |
|---|---|
| moxa | edr-810-2gsfp |
| moxa | edr-810-2gsfp firmware |
| moxa | edr-810-2gsfp-t |
| moxa | edr-810-2gsfp-t firmware |
| moxa | edr-810-vpn-2gsfp |
| moxa | edr-810-vpn-2gsfp firmware |
| moxa | edr-810-vpn-2gsfp-t |
| moxa | edr-810-vpn-2gsfp-t firmware |
| moxa | edr-g902 |
| moxa | edr-g902 firmware |
| moxa | edr-g902-t |
| moxa | edr-g902-t firmware |
| moxa | edr-g903 |
| moxa | edr-g903 firmware |
| moxa | edr-g903-t |
| moxa | edr-g903-t firmware |
References
→ the Explorer · watch your stack · NVD