CVE-2017-12124

CVE-2017-12124 affects Moxa EDR-810 Web Server (V4.1, build 17030317). A crafted HTTP URI can trigger a null pointer dereference in the web server, causing a crash and denial of service. Talos notes the issue in the web server functionality and provides timeline of vendor fixes with updated firmw...

CVE-2017-14435

CVE-2017-14435 affects Moxa EDR-810 Web Server on version 4.1 build 17030317. A null pointer dereference in the web server can be triggered by a crafted HTTP URI, specifically by sending a GET to /MOXA_CFG.ini (and related endpoints such as /MOXA_LOG.ini or /MOXA_CFG2.ini) without a cookie header...

CVE-2017-12127

CVE-2017-12127 affects Moxa EDR-810 (V4.1, build 17030317). A password storage vulnerability allows an attacker with shell access to read plaintext credentials from /magicP/cfg4.0/cfg_file/USER_ACCOUNT.CFG (mirrors /etc/shadow). CVSSv3.0 score ~4.4 (MEDIUM) with LOCAL access and HIGH confidential...

CVE-2017-12129

An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them...

CVE-2017-12123

CVE-2017-12123 affects Moxa EDR-810 (V4.1 build 17030317). The web server and Telnet allow a cleartext transmission of passwords ; an attacker can sniff network traffic to obtain the admin password and log in as admin. Multiple sources (Talos advisories TALOS-2017-0475, -0479, and related reports...

CVE-2017-12124

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server crashing. An attacker can send a crafted URI to trigger this vulnerability...

CVE-2017-12123

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin...

CVE-2017-14435

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\CFG.ini" without a cookie heade...

CVE-2017-14436

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\CFG2.ini" without a cookie head...

CVE-2017-14438

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4000/tcp to trigger this vulnerability...

CVE-2017-12128

CVE-2017-12128 affects Moxa EDR-810, specifically the Server Agent in version 4.1 build 17030317. A crafted TCP packet (0x21) over TCP/4000 can trigger an information-disclosure vulnerability, exposing device data (model, firmware, serial, location, MAC, IP mask, etc.). Public writeups from Talos...

CVE-2017-12129

CVE-2017-12129 affects Moxa EDR-810 Web Server. Cisco Talos reports a weakness in cryptography for passwords: after login, each authenticated request sends a MD5-hashed password (not salted), enabling cracking of the password and potential compromise of the device. Affected product/version: Moxa ...

CVE-2017-12121

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the rsakey\name= parm in the...

CVE-2017-14432

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the openvpnServer0tmp= parameter in the...

CVE-2017-14436

CVE-2017-14436 affects Moxa EDR-810, firmware version 4.1 build 17030317. A denial of service can be triggered by a crafted HTTP GET request to /MOXA_CFG2.ini without a cookie header, causing a null pointer dereference in the web server. Exploitation is network-based and requires no authenticatio...

CVE-2017-14437

CVE-2017-14437 affects Moxa EDR-810 Web Server (V4.1, build 17030317). A denial-of-service is exploitable by sending a crafted HTTP GET to endpoints such as "/MOXA_LOG.ini" (and related variants), triggering a null pointer dereference without a cookie header. Talos confirms multiple related DO vu...

CVE-2017-12126

CVE-2017-12126 is a CSRF vulnerability in the web server of the Moxa EDR-810 (V4.1, build 17030317). A specially crafted HTTP request can trigger cross-site request forgery, potentially changing device configuration when a logged-in user visits a malicious page. The exploitation details are docum...

CVE-2017-12127

A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device...

CVE-2017-14439

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4001/tcp to trigger this vulnerability...

CVE-2017-14439

CVE-2017-14439 affects Moxa EDR-810 with the Service Agent (V4.1, build 17030317). A crafted packet to ports 4000/4001 can trigger a denial-of-service. Talos/Tenable/NVD describe exploitable DoS with CVSSv3 base 7.5 (NETWORK, LOW attack complexity, no auth, Availability Impact HIGH). The Service ...