Lucene search
PRIOn knowledge basePRION:CVE-2017-12125HistoryMay 14, 2018 - 8:29 p.m.
Command injection
2018-05-1420:29:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the CN= parm in the “/goform/net_WebCSRGen” uri to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| edr-810_firmware | eq | 4.1 |
Related
talos
talos
seebug
seebug
cve
cve
CVE-2017-12125
2018-05-14 20:29:00
cvelist
cvelist
CVE-2017-12125
2018-04-13 00:00:00
nessus
nessus
nvd
nvd
CVE-2017-12125
2018-05-14 20:29:00
talosblog
talosblog