CVE-2017-14433

CVE-2017-14433 affects Moxa EDR-810 web server (V4.1, build 17030317). A command-injection flaw in the Web interface allows OS commands to be injected via the remoteNetwork0 parameter in POST requests to /goform/net_Web_get_value, enabling privilege escalation to a root shell. TALOS reports the i...

CVE-2017-14432

CVE-2017-14432 affects Moxa EDR-810 (V4.1, build 17030317). The web server allows command injection via POST to /goform/net_Web_get_value, injecting commands into openvpnServer0_tmp= and escalating privileges to root after authentication. Talos notes four related CVEs culminated in root-shell acc...

CVE-2017-12125

CVE-2017-12125 affects Moxa EDR-810 Web Server (V4.1, build 17030317). A crafted HTTP POST to /goform/net_WebCSRGen allows OS command injection via the CN parameter, enabling privilege escalation to a root shell. Public references (Talos/Talos blog, NVD, NASL plugin) describe the same vulnerabili...

CVE-2017-12121

The CVE-2017-12121 issue affects Moxa EDR-810 Web RSA Key Generation functionality. Talos reports a command-injection in the rsakey_name parameter of the /goform/WebRSAKEYGen POST, enabling privilege escalation to root when authenticated. A root shell can be obtained via crafted input; affected p...

CVE-2017-12120

CVE-2017-12120 affects Moxa EDR-810 Web Ping functionality in firmware build 17030317. A crafted HTTP POST to /goform/net_WebPingGetValue allows OS command injection via the ip= parameter, enabling privilege escalation to a root shell. Affected product is the Moxa EDR-810; impact includes potenti...

CVE-2017-14438

CVE-2017-14438 affects the Moxa EDR-810 Industrial Secure Router (V4.1, build 17030317). The vulnerability lies in the Service Agent: sending a specially crafted large TCP packet to port 4000 (and 4001) can cause a denial-of-service crash. Talos reports the issue on ports 4000/tcp and 4001/tcp wi...

CVE-2017-14434

Summary: CVE-2017-14434 affects Moxa EDR-810 Web Server (V4.1 build 17030317). The vulnerability is a command injection in the web server’s OpenVPN config endpoint, exploitable after logging in via HTTP POST to /goform/net_Web_get_value, specifically through the remoteNetmask0 parameter, allowing...

CVE-2017-12128

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigger this vulnerability...

CVE-2017-14437

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\LOG.ini" without a cookie heade...

PT-2018-5637 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA CFG2.ini" without a cookie header...

PT-2018-5370 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A weakness in cryptography for passwords exists in the web server functionality, allowing an attacker to intercept weakly encrypted passwords and potentially brute force them...

PT-2018-5636 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA CFG.ini" without a cookie header,...

PT-2018-5367 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A cross-site request forgery issue exists in the web server functionality, allowing an attacker to create malicious HTML that can trigger this issue when a specially crafted HTTP packet is...

PT-2018-5634 · Moxa · Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A command injection issue exists in the web server functionality, allowing a specially crafted HTTP POST to cause a privilege escalation resulting in a root shell. An attacker can inject OS...

PT-2018-5638 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA LOG.ini" without a cookie header,...

PT-2018-5369 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: An information disclosure issue exists in the Server Agent functionality. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigg...

PT-2018-5368 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A password storage issue exists in the operating system functionality, allowing an attacker with shell access to extract passwords in clear text from the device. Recommendations: For Moxa...

PT-2018-5366 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A command injection issue exists in the web server functionality, allowing a specially crafted HTTP POST to cause a privilege escalation, resulting in a root shell. An attacker can inject O...

PT-2018-5635 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A command injection issue exists in the web server functionality, allowing for privilege escalation to root shell. This can be triggered by injecting OS commands into the remoteNetmask0...

PT-2018-5364 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A clear text transmission of password issue exists in the web server and telnet functionality. An attacker can intercept network traffic to obtain the admin password for the device, and the...