https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:27:26.531622+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-129 certa-2013-avi-129 — Une vulnérabilité a été corrigée dans <span class="textit">le système SCADA Moxa EDR-G903</span>. Elle permet à un atta… 2026-10-02T15:27:26.601660+00:00 certa-2013-avi-129 https://cve.radiocsirt.org/vuln/euvd-2026-165160 EUVD-2026-165160 2026-10-02T15:27:26.601706+00:00 EUVD-2026-165160 https://cve.radiocsirt.org/vuln/fkie_cve-2012-4694 fkie_cve-2012-4694 2026-10-02T15:27:26.601721+00:00

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

 https://cve.radiocsirt.org/vuln/ghsa-xw3x-gmvv-p64m GHSA-xw3x-gmvv-p64m 2026-10-02T15:27:26.601751+00:00

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere.

 https://cve.radiocsirt.org/vuln/gsd-2012-4694 gsd-2012-4694 2026-10-02T15:27:26.601768+00:00 gsd-2012-4694 https://cve.radiocsirt.org/vuln/icsa-13-042-01 ICSA-13-042-01 — MOXA EDR-G903 Series Multiple Vulnerabilities 2026-10-02T15:27:26.601779+00:00

Moxa EDR-G903 series routers with firmware before 2.11 do not use a sufficient source of entropy for (1) SSH and (2) SSL keys, which makes it easier for man-in-the-middle attackers to spoof a device or modify a client-server data stream by leveraging knowledge of a key from a product installation elsewhere. Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors.