The EDS-4000/G4000 Series prior to version 3.2 includes IP forwarding capabilities that users cannot deactivate. An attacker may be able to send requests to the product and have it forwarded to the target. An attacker can bypass access controls or hide the source of malicious requests.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
EDS-4008 Series
Vendor
Moxa
Product
EDS-4008 Series
Platforms
Unknown
Default status
unaffected
EDS-4008 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.2
None listed
EDS-4009 Series
Vendor
Moxa
Product
EDS-4009 Series
Platforms
Unknown
Default status
unaffected
EDS-4009 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.2
None listed
EDS-4012 Series
Vendor
Moxa
Product
EDS-4012 Series
Platforms
Unknown
Default status
unaffected
EDS-4012 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.2
None listed
EDS-4014 Series
Vendor
Moxa
Product
EDS-4014 Series
Platforms
Unknown
Default status
unaffected
EDS-4014 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.2
None listed
EDS-G4008 Series
Vendor
Moxa
Product
EDS-G4008 Series
Platforms
Unknown
Default status
unaffected
EDS-G4008 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.2
None listed
EDS-G4012 Series
Vendor
Moxa
Product
EDS-G4012 Series
Platforms
Unknown
Default status
unaffected
EDS-G4012 Series · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0
affected
custom
Unavailable
3.2
None listed
EDS-G4014 Series
Vendor
Moxa
Product
EDS-G4014 Series
Platforms
Unknown
Default status
unaffected
EDS-G4014 Series · Scoped product and version facts