CVE-2017-12123: An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An…

PriorityP345high8.8CVSS 3.1

AVAACLPRNUINSUCHIHAH

EPSS

1.05%

60.0th percentile

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
moxa	edr-810_firmware	—	—
talos	moxa	—	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvdv3.05.7MEDIUMCVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

nvdv2.03.3LOWAV:A/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.