CVE:CVE-2020-28144
CNNVD:CNNVD-202102-312
MOXA Moxa EDR-810等都是中国台湾摩莎（MOXA）公司的产品。Moxa EDR-810是一款安全路由器。Moxa EDR-G903等都是中国Moxa（Moxa）公司的产品。Moxa EDR-G903是一款集防火墙/NAT/VPN 于一体的工业安全路由器设备。Moxa EDR-G902是一款集防火墙/NAT/VPN 于一体的工业安全路由器设备。
多款 Moxa products 存在缓冲区错误漏洞，该漏洞源于操作限制不当，导致远程任意代码执行。以下产品及版本受到影响：EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower, and EDR-810 Series Firmware Version 5.6 or lower。
solution:Upgrade moxa edr-g903_firmware to a higher version than 5.5,and avoid the version (,5.5]; Upgrade moxa edr-g903-t_firmware to a higher version than 5.5,and avoid the version (,5.5]; Upgrade moxa edr-g902_firmware to a higher version than 5.5,and avoid the version (,5.5]; Upgrade moxa edr-g902-t_firmware to a higher version than 5.5,and avoid the version (,5.5]; Upgrade moxa edr-810-2gsfp_firmware to a higher version than 5.6,and avoid the version (,5.6]; Upgrade moxa edr-810-2gsfp-t_firmware to a higher version than 5.6,and avoid the version (,5.6]; Upgrade moxa edr-810-vpn-2gsfp_firmware to a higher version than 5.6,and avoid the version (,5.6]; Upgrade moxa edr-810-vpn-2gsfp-t_firmware to a higher version than 5.6,and avoid the version (,5.6]