CVE-2019-10963 Information disclosure in Moxa EDR 810
An unauthenticated attacker can retrieve sensitive log files from Moxa EDR 810 devices if logs were previously exported by a legitimate user.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-10963?
CVE-2019-10963 is a medium-severity vulnerability in Moxa EDR 810, published on 8 Oct 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.
Weakness: CWE-321
Which versions are affected by CVE-2019-10963?
It affects 1 product.
Products include Moxa Edr-810 Firmware.
How do I fix CVE-2019-10963?
No fix has been published for CVE-2019-10963 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-10963 being exploited?
There is no known exploitation of CVE-2019-10963 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Moxa EDR 810
Sources
Also known as GHSA-8gff-6cc3-2wfw.