CVE-2017-14432

CVE-2017-14432 affects Moxa EDR-810 (V4.1, build 17030317). The web server allows command injection via POST to /goform/net_Web_get_value, injecting commands into openvpnServer0_tmp= and escalating privileges to root after authentication. Talos notes four related CVEs culminated in root-shell acc...

CVE-2017-14436

CVE-2017-14436 affects Moxa EDR-810, firmware version 4.1 build 17030317. A denial of service can be triggered by a crafted HTTP GET request to /MOXA_CFG2.ini without a cookie header, causing a null pointer dereference in the web server. Exploitation is network-based and requires no authenticatio...

CVE-2017-12126

CVE-2017-12126 is a CSRF vulnerability in the web server of the Moxa EDR-810 (V4.1, build 17030317). A specially crafted HTTP request can trigger cross-site request forgery, potentially changing device configuration when a logged-in user visits a malicious page. The exploitation details are docum...

CVE-2017-12120

CVE-2017-12120 affects Moxa EDR-810 Web Ping functionality in firmware build 17030317. A crafted HTTP POST to /goform/net_WebPingGetValue allows OS command injection via the ip= parameter, enabling privilege escalation to a root shell. Affected product is the Moxa EDR-810; impact includes potenti...

CVE-2017-12124

CVE-2017-12124 affects Moxa EDR-810 Web Server (V4.1, build 17030317). A crafted HTTP URI can trigger a null pointer dereference in the web server, causing a crash and denial of service. Talos notes the issue in the web server functionality and provides timeline of vendor fixes with updated firmw...

CVE-2017-12123

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin...

CVE-2017-12125

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the CN= parm in the "/goform/netWebCSRGen" uri...

CVE-2017-12128

CVE-2017-12128 affects Moxa EDR-810, specifically the Server Agent in version 4.1 build 17030317. A crafted TCP packet (0x21) over TCP/4000 can trigger an information-disclosure vulnerability, exposing device data (model, firmware, serial, location, MAC, IP mask, etc.). Public writeups from Talos...

CVE-2017-12121

The CVE-2017-12121 issue affects Moxa EDR-810 Web RSA Key Generation functionality. Talos reports a command-injection in the rsakey_name parameter of the /goform/WebRSAKEYGen POST, enabling privilege escalation to root when authenticated. A root shell can be obtained via crafted input; affected p...

CVE-2017-14434

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the remoteNetmask0= parameter in the...

CVE-2017-12127

A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device...

CVE-2017-12129

An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them...

CVE-2017-12121

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the rsakey\name= parm in the...

CVE-2017-14437

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\LOG.ini" without a cookie heade...

CVE-2017-14435

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\CFG.ini" without a cookie heade...

CVE-2017-14435

CVE-2017-14435 affects Moxa EDR-810 Web Server on version 4.1 build 17030317. A null pointer dereference in the web server can be triggered by a crafted HTTP URI, specifically by sending a GET to /MOXA_CFG.ini (and related endpoints such as /MOXA_LOG.ini or /MOXA_CFG2.ini) without a cookie header...

CVE-2017-12129

CVE-2017-12129 affects Moxa EDR-810 Web Server. Cisco Talos reports a weakness in cryptography for passwords: after login, each authenticated request sends a MD5-hashed password (not salted), enabling cracking of the password and potential compromise of the device. Affected product/version: Moxa ...

CVE-2017-12125

CVE-2017-12125 affects Moxa EDR-810 Web Server (V4.1, build 17030317). A crafted HTTP POST to /goform/net_WebCSRGen allows OS command injection via the CN parameter, enabling privilege escalation to a root shell. Public references (Talos/Talos blog, NVD, NASL plugin) describe the same vulnerabili...

CVE-2017-14432

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the openvpnServer0tmp= parameter in the...

CVE-2017-12126

An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP packet can cause cross-site request forgery. An attacker can create malicious HTML to trigger this vulnerability...