Command Injection in NTP Setting

A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.

N/A

OS命令中使用的特殊元素转义处理不恰当(OS命令注入)

MOXA EDR-810 操作系统命令注入漏洞

MOXA EDR-810是中国摩莎（MOXA）公司的一款安全路由器。 MOXA EDR-810存在安全漏洞，该漏洞源于设备Web界面中的NTP设置，可能导致远程攻击者执行任意系统命令和无限重启循环。

N/A

N/A