CVE-2019-10969
CVE-2019-10969
Vexday Risk Score
23Low
SSVC decision (CISA)
Attend
PoC available → attend closely
CVSS —EPSS 8.7%KEV nãoPoC públicaNuclei —Metasploit —Patch —
Lifecycle
08 Oct 2019Published on NVD
22 Oct 2019Public PoC
Recommendation: Plan a near-term fix — a public PoC already exists.
Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution.
Affected products
n/a · Moxa EDR 810public PoCs found — 2
cve_referencepacketstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.htmlunverifiedexploitdbwww.exploit-db.com/exploits/47536unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →