This vulnerability (CWE-282) in Moxa EDR-8010 Series Secure Router version 1.0 arises from improper ownership management. A low-privileged authenticated user can access an exported configuration file that contains the hashed administrative password. The vulnerability does not allow modification or disruption of the device or downstream systems. Exploitation is limited to scenarios where the configuration file is exported, restricting the attack surface.

An attacker with low-privileged authenticated access can obtain sensitive information in the form of a hashed administrative password from an exported configuration file. There is no direct impact on system integrity or availability, and no impact on subsequent connected systems has been identified. The CVSS 4.0 base score is 6.0, indicating a medium severity level.

No official patch or remediation level has been published by the vendor as of now. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Mitigation should focus on controlling access to configuration export functionality and limiting low-privileged user permissions to prevent unauthorized export of configuration files.