CVE-2017-12123medium

CVE-2017-12123: medium-severity vulnerability in Talos Moxa

Published · Updated

Follow this CVE+ Monitor Moxa

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.7epss 1.0%
An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Affected products
Talos · Moxa
Related CVEs — Talos Moxa

In the same product, most dangerous first.

CVE-2017-12128MEDIUMCVE-2017-12128EPSS 40.1%CVE-2017-14459CRITICALCVE-2017-14459EPSS 12.6%CVE-2017-14433HIGHCVE-2017-14433EPSS 4.4%CVE-2017-12120HIGHCVE-2017-12120EPSS 4.3%CVE-2017-12121HIGHCVE-2017-12121EPSS 4.3%CVE-2017-14434HIGHCVE-2017-14434EPSS 4.1%