CVE-2017-14432

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the openvpnServer0tmp= parameter in the...

CVE-2017-14438

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4000/tcp to trigger this vulnerability...

CVE-2017-14439

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4001/tcp to trigger this vulnerability...

CVE-2017-12126

An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP packet can cause cross-site request forgery. An attacker can create malicious HTML to trigger this vulnerability...

CVE-2017-14435

CVE-2017-14435 affects Moxa EDR-810 Web Server on version 4.1 build 17030317. A null pointer dereference in the web server can be triggered by a crafted HTTP URI, specifically by sending a GET to /MOXA_CFG.ini (and related endpoints such as /MOXA_LOG.ini or /MOXA_CFG2.ini) without a cookie header...

CVE-2017-12123

CVE-2017-12123 affects Moxa EDR-810 (V4.1 build 17030317). The web server and Telnet allow a cleartext transmission of passwords ; an attacker can sniff network traffic to obtain the admin password and log in as admin. Multiple sources (Talos advisories TALOS-2017-0475, -0479, and related reports...

CVE-2017-12127

CVE-2017-12127 affects Moxa EDR-810 (V4.1, build 17030317). A password storage vulnerability allows an attacker with shell access to read plaintext credentials from /magicP/cfg4.0/cfg_file/USER_ACCOUNT.CFG (mirrors /etc/shadow). CVSSv3.0 score ~4.4 (MEDIUM) with LOCAL access and HIGH confidential...

CVE-2017-12120

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation, resulting in a root shell. An attacker can inject OS commands into the ip= parm in the...

CVE-2017-12124

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server crashing. An attacker can send a crafted URI to trigger this vulnerability...

CVE-2017-14433

CVE-2017-14433 affects Moxa EDR-810 web server (V4.1, build 17030317). A command-injection flaw in the Web interface allows OS commands to be injected via the remoteNetwork0 parameter in POST requests to /goform/net_Web_get_value, enabling privilege escalation to a root shell. TALOS reports the i...

CVE-2017-12129

CVE-2017-12129 affects Moxa EDR-810 Web Server. Cisco Talos reports a weakness in cryptography for passwords: after login, each authenticated request sends a MD5-hashed password (not salted), enabling cracking of the password and potential compromise of the device. Affected product/version: Moxa ...

CVE-2017-12125

CVE-2017-12125 affects Moxa EDR-810 Web Server (V4.1, build 17030317). A crafted HTTP POST to /goform/net_WebCSRGen allows OS command injection via the CN parameter, enabling privilege escalation to a root shell. Public references (Talos/Talos blog, NVD, NASL plugin) describe the same vulnerabili...

PT-2018-5370 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A weakness in cryptography for passwords exists in the web server functionality, allowing an attacker to intercept weakly encrypted passwords and potentially brute force them...

PT-2018-5367 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A cross-site request forgery issue exists in the web server functionality, allowing an attacker to create malicious HTML that can trigger this issue when a specially crafted HTTP packet is...

PT-2018-5361 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A command injection issue exists in the web server functionality, allowing a specially crafted HTTP POST to cause a privilege escalation, resulting in a root shell. An attacker can inject O...

PT-2018-5368 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A password storage issue exists in the operating system functionality, allowing an attacker with shell access to extract passwords in clear text from the device. Recommendations: For Moxa...

PT-2018-5364 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A clear text transmission of password issue exists in the web server and telnet functionality. An attacker can intercept network traffic to obtain the admin password for the device, and the...

PT-2018-5637 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the web server functionality. It can be triggered by a specially crafted HTTP URI, specifically a GET request to "/MOXA CFG2.ini" without a cookie header...

PT-2018-5639 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A denial of service issue exists in the Service Agent functionality, allowing an attacker to cause a denial of service by sending a specially crafted packet. The attacker can trigger this...

PT-2018-5366 · Moxa · Moxa Edr-810

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317 Description: A command injection issue exists in the web server functionality, allowing a specially crafted HTTP POST to cause a privilege escalation, resulting in a root shell. An attacker can inject O...