This vulnerability (CVE-2026-3868) affects Moxa EDR-8010 Series Secure Router version 1.0. Due to improper validation of length parameters in the HTTPS management interface, an unauthenticated remote attacker can send specially crafted requests that cause a buffer overflow. This overflow leads to the web service becoming unresponsive, effectively causing a denial-of-service (DoS) condition. The vulnerability is classified under CWE-130 (Improper Handling of Length Parameter Inconsistency). The CVSS v4.0 base score is 8.7, indicating high severity, with attack vector network, no privileges or user interaction required, and high impact on availability only. No impact on confidentiality or integrity has been identified. No known exploits in the wild or vendor-provided patches/remediation are currently available.

The primary impact is a denial-of-service condition on the affected Moxa EDR-8010 device, caused by a buffer overflow in the HTTPS management interface. This results in the web service becoming unresponsive and requires a device reboot to restore normal operation. There is no impact on confidentiality or integrity of the device or downstream systems.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor for unusual unavailability of the HTTPS management interface and consider limiting network exposure of the management interface to trusted sources only.