Description
TN-4900 Series firmware versions v1.2.4 and prior and TN-5900 Series firmware versions v3.3 and prior are vulnerable to the command injection vulnerability. This vulnerability stems from insufficient input validation in the key-generation function, which could potentially allow malicious users to execute remote code on affected devices.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Moxa TN-5900 Series
Default version status: unaffected
1.0 to ≤ 3.3affected
Moxa TN-4900 Series
Default version status: unaffected
1.0 to ≤ 1.2.4affected
Moxa EDR-810 Series
Default version status: unaffected
1.0 to ≤ 5.12.27affected
Moxa EDR-G902 Series
Default version status: unaffected
1.0 to ≤ 5.7.17affected
Moxa EDR-G903 Series
Default version status: unaffected
1.0 to ≤ 5.7.15affected
Moxa EDR-G9010 Series
Default version status: unaffected
1.0 to ≤ 2.1affected
Moxa NAT-102 Series
Default version status: unaffected
1.0 to ≤ 1.0.3affected