cbcvebase.
CVE-2017-7455
published 2017-04-14

CVE-2017-7455: Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

PriorityP262high7.5CVSS 3.0
AVNACLPRNUINSUCHINAN
EXPLOIT
EPSS
16.34%
96.6th percentile
Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

Affected

1 ranges
VendorProductVersion rangeFixed in
moxamxview——

Detection & IOCsextracted from sources · hover to see the quote

pathC:\Users\TARGET-USER\AppData\Roaming\moxa\mxview\web\certs\mxview.key↗
urlhttp://VICTIM-IP:81/certs/mxview.key↗
filenamemxview.key↗
commandGET /certs/mxview.key HTTP/1.1↗
  • →Monitor HTTP GET requests for the path /certs/mxview.key on port 81, which indicates an attempt to retrieve the MXview web server private key. ↗
  • →Alert on any inbound HTTP request to port 81 containing the URI path /certs/mxview.key, regardless of source IP, as no access control is enforced. ↗
  • ·The private key file is stored in a user-accessible roaming AppData path, meaning the exposure path may vary per the logged-in TARGET-USER account running the MXview service. ↗
  • ·The vulnerability affects MXview V2.8 specifically; the vendor issued an updated firmware on April 7, 2017 to address this issue. ↗

CVSS provenance

nvdv3.07.5HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.