Lucene search

TalosCVE-2017-12123

HistoryMay 14, 2018 - 8:29 p.m.

CVE-2017-12123

2018-05-1420:29:00

CWE-522

talos

web.nvd.nist.gov

vulnerability

moxa edr-810

clear text

password

web server

telnet

cve-2017-12123

nvd

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

45.0%

JSON

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

Affected configurations

Nvd

Vulners

Node

moxaedr-810_firmwareMatch4.1

AND

moxaedr-810Match-

VendorProductVersionCPE
moxaedr-810_firmware4.1cpe:2.3:o:moxa:edr-810_firmware:4.1:*:*:*:*:*:*:*
moxaedr-810-cpe:2.3:h:moxa:edr-810:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moxa	edr-810_firmware	4.1	cpe:2.3:o:moxa:edr-810_firmware:4.1:::::::*
moxa	edr-810	-	cpe:2.3:h:moxa:edr-810:-:::::::*

CNA Affected

[
  {
    "product": "Moxa",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Moxa EDR-810 V4.1 build 17030317"
      }
    ]
  }
]

References

www.talosintelligence.com/vulnerability_reports/TALOS-2017-0475

CVSS2

3.3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

CVSS3

8.8

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

45.0%

JSON

Related for CVE-2017-12123