As of June 15, 2022, this site no longer supports Internet Explorer. Please use another browser for the best experience on our site.

Product support

Security Advisories


EDR-810/G902/G903 Series Web Server Buffer Overflow Vulnerability

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them  vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot. 

The identified vulnerability types and potential impacts are shown below:

Item Vulnerability Type Impact
Buffer Copy Without Checking Size of Input (CWE-120) 
An attacker can trigger the device reboot. 


Vulnerability Scoring Details

CVE-2023-4452 6.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L  Yes



Affected Products:

The affected products and firmware versions are shown below.

Product Series Affected Versions
EDR-810 Series  Firmware version v5.12.28 and prior versions  
EDR G902 Series  Firmware version v5.7.20 and prior versions  
EDR G903 Series  Firmware version v5.7.20 and prior versions  



Moxa has developed appropriate solutions to address the vulnerabilities. The solutions for affected products are shown below. 

Product Series Solutions
EDR-810 Series  Please upgrade to firmware v5.12.29 or later 
EDR-G902 Series  Please upgrade to firmware v5.7.21 or later 
EDR-G903 Series  Please upgrade to firmware v5.7.21 or later 



  • Minimize network exposure to ensure the device is not accessible from the Internet. 

  • When remote access is required, use secure methods, such as Virtual Private Networks (VPNs). 

  • The starting point of all the above vulnerabilities is from the web service, so it is suggested to disable web service temporarily if you have completed the configuration to prevent further damages from these vulnerabilities until installing the patch or updating the firmware.  


Products That Are Not Vulnerable:

Only the products listed in the Affected Products section of this advisory are known to be affected by this vulnerability. Moxa has confirmed that this vulnerability does not affect the following products: 

  • EDR-8010 Series, EDR-G9010 Series 

  • NAT-102 Series 

  • TN-5500A Series, TN-4500A Series, TN-G4500 Series, TN-G6500 Series 

  • TN-4900 Series, TN-5900 Series, TN-5900-ETBN Series 

  • AWK-3131A Series, AWK-3131A-RCC Series, AWK-3131A-RTG Series 

  • TAP-213 Series, TAP-323 Series 

  • WAC-1001 Series, WAC-2004A Series 

  • VPort 06-2 Series, VPort 06EC-2V Series, VPort 461A Series, VPort 464 Series, VPort P06-1MP-M12 Series, VPort P06HC-1V Series, VPort P16-1MP-M12 Series, VPort P16-1MP-M12-IR Series, VPort P16-2MR Series 



We would like to express our appreciation to Zhiyuan Chen for reporting the vulnerability, working with us to help enhance the security of our products, and helping us provide a better service to our customers. 


Revision History:

1.0 First Release Nov 1, 2023 

Relevant Products

EDR-810 Series · EDR-G902 Series · EDR-G903 Series ·

  •   Print this page
  • You can manage and share your saved list in My Moxa
Let’s get that fixed

If you are concerned about a potential cybersecurity vulnerability, please contact us and one of technical support staff will get in touch with you.

Report a Vulnerability
Added To Bag
You have some items waiting in your bag; click here to finish your quote!