CVE-2019-10963

State: Published
Severity: Not scored
Published: Oct 8, 2019
Updated: Aug 4, 2024
Reserved: Apr 8, 2019

Description

Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.

Scores

The record has no CVSS score.

Weaknesses

CWE-321 USE OF HARD-CODED CRYPTOGRAPHIC KEY CWE-321

Affected Products

Product	Versions
Moxa EDR 810n/a	All versions 5.1 and priorAffected

References

https://www.us-cert.gov/ics/advisories/icsa-19-274-03
http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.