CVE-2017-12123

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

Score

CVSS 3.1 8.8 High

Status

Modified - talos-cna@cisco.com

Published

2018-05-14

Last modified

2024-09-16

Weaknesses

CWE-319, CWE-522

Affected products

• Edr-810 Firmware (Moxa)
• Moxa (Talos)

References

• https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0475