CVE-2020-14511: Buffer Overflow
First published: Wed Jul 15 2020(Updated: )
Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4).
Credit: ics-cert@hq.dhs.gov
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moxa Edr-g902-t Firmware | <=5.4 | |
| Moxa Edr-g902-t | ||
| Moxa Edr-g902 Firmware | <=5.4 | |
| Moxa Edr-g902 | ||
| Moxa Edr-g903-t Firmware | <=5.4 | |
| Moxa Edr-g903-t | ||
| Moxa Edr-g903 Firmware | <=5.4 | |
| Moxa EDR-G903 | ||
| Moxa EDR-G902 Series: firmware versions 5.4 and prior | ||
| Moxa EDR-G903 Series: firmware versions 5.4 and prior |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2020-14511.
What is the severity level of CVE-2020-14511?
The severity level of CVE-2020-14511 is critical (9.8).
Which routers are affected by CVE-2020-14511?
The EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4) are affected by CVE-2020-14511.
How can this vulnerability be exploited?
This vulnerability can be exploited by performing a malicious operation with a crafted web browser cookie, causing a stack-based buffer overflow in the system web server.
Is there a fix available for CVE-2020-14511?
Yes, updating the firmware to version 5.4 or higher resolves the vulnerability.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/description
- agent/severity
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/moxa
- canonical/moxa edr-g902-t firmware
- version/moxa edr-g902-t firmware/5.4
- canonical/moxa edr-g902-t
- canonical/moxa edr-g902 firmware
- version/moxa edr-g902 firmware/5.4
- canonical/moxa edr-g902
- canonical/moxa edr-g903-t firmware
- version/moxa edr-g903-t firmware/5.4
- canonical/moxa edr-g903-t
- canonical/moxa edr-g903 firmware
- version/moxa edr-g903 firmware/5.4
- canonical/moxa edr-g903
- canonical/moxa edr-g902 series: firmware versions 5.4 and prior
- canonical/moxa edr-g903 series: firmware versions 5.4 and prior