CVE-2020-14511

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-07-15 · updated 2026-06-17
Weakness: CWE-121

Description

Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior to 5.4).

Affected products

Moxa Edr-G902-T Firmware: through 5.4
Moxa Edr-G902 Firmware: through 5.4
Moxa Edr-G903-T Firmware: through 5.4
Moxa Edr-G903 Firmware: through 5.4

References

https://us-cert.cisa.gov/ics/advisories/icsa-20-196-02
https://us-cert.cisa.gov/ics/advisories/icsa-20-196-02

Get alerted when CVE-2020-14511 or the next vulnerability affects your stack