CVE-2017-14432

🗓️ 14 May 2018 20:00:00Reported by talosType

cve🔗 web.nvd.nist.gov👁 53 Views🌐 WEB

Vulnerability in Moxa EDR-810 V4.1 build 1703031

Reporter	Title	Published	Views	Family All 10
CNVD	Moxa EDR-810 Command Injection Vulnerability (CNVD-2018-11724)	15 May 201800:00	–	cnvd
Cvelist	CVE-2017-14432	14 May 201820:00	–	cvelist
EUVD	EUVD-2017-5935	7 Oct 202500:30	–	euvd
NVD	CVE-2017-14432	14 May 201820:29	–	nvd
Prion	Command injection	14 May 201820:29	–	prion
Positive Technologies	PT-2018-5633 · Moxa · Moxa Edr-810	14 May 201800:00	–	ptsecurity
seebug.org	Moxa EDR-810 Web Server OpenVPN Config Multiple Command Injection Vulnerabilities(CVE-2017-14432 - CVE-2017-14434)	16 Apr 201800:00	–	seebug
Talos	Moxa EDR-810 Web Server OpenVPN Config Multiple Command Injection Vulnerabilities	13 Apr 201800:00	–	talos
Talos Blog	Vulnerability Spotlight: Multiple Vulnerabilities in Moxa EDR-810 Industrial Secure Router	13 Apr 201808:57	–	talosblog
Tenable Nessus	Moxa EDR-810 Web Server OpenVPN Config Command Injection (CVE-2017-14432)	2 Aug 202300:00	–	nessus

NVD

Vulners

Node

moxa edr-810_firmwareMatch4.1

AND

moxa edr-810Match-

[
  {
    "product": "Moxa",
    "vendor": "Talos",
    "versions": [
      {
        "status": "affected",
        "version": "Moxa EDR-810 V4.1 build 17030317"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2017-0482

Parameter	Position	Path	Description	CWE
openvpnServer0_tmp	request body	goform/net_Web_get_value	Command injection via POST parameter openvpnServer0_tmp to /goform/net_Web_get_value	CWE-78
remoteNetwork0	request body	goform/net_Web_get_value	Command injection via POST parameter remoteNetwork0 to /goform/net_Web_get_value	CWE-78
remoteNetmask0	request body	goform/net_Web_get_value	Command injection via POST parameter remoteNetmask0 to /goform/net_Web_get_value	CWE-78

21 Nov 2024 03:12Current

9High risk

Vulners AI Score9

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.02645

CWE-78