{"id":"CVE-2019-10963","url":"https://www.cyber-defence.io/tools/cve/CVE-2019-10963","generatedAt":"2026-10-29T00:41:46.499Z","title":"Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure.","description":"Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitimate user.","published":"2019-10-08T19:15:10.000Z","lastModified":"2026-06-17T02:12:01.000Z","status":"Modified","sourceIdentifier":"ics-cert@hq.dhs.gov","cvss":{"version":"3.1","score":4.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"},"cwe":["CWE-321"],"affected":["moxa/edr-810 firmware"],"epss":{"score":0.06499,"percentile":0.93731,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2019-10-22","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":47536,"kind":"exploit","title":"Moxa EDR-810 - Command Injection / Information Disclosure","url":"https://www.exploit-db.com/exploits/47536","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/remote/47536.txt","file":"exploits/hardware/remote/47536.txt","published":"2019-10-22","added":"2019-10-22","updated":"2019-10-22","author":"RandoriSec","type":"remote","platform":"hardware","port":null,"verified":false,"codes":["CVE-2019-10969","CVE-2019-10963"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"high","text":"A public exploit is published in Exploit-DB, so the technical barrier is gone even though the severity is medium and EPSS is 6.5%. Treat it as high on anything reachable from the internet."},"changes":[],"references":[{"url":"http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"ics-cert@hq.dhs.gov"},{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-274-03","tags":["Third Party Advisory","US Government Resource"],"source":"ics-cert@hq.dhs.gov"},{"url":"http://packetstormsecurity.com/files/154943/Moxa-EDR-810-Command-Injection-Information-Disclosure.html","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.us-cert.gov/ics/advisories/icsa-19-274-03","tags":["Third Party Advisory","US Government Resource"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2019-10963","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}