CVE-2017-12123

CVE-2017-12123 affects Moxa EDR-810 (V4.1 build 17030317). The web server and Telnet allow a cleartext transmission of passwords ; an attacker can sniff network traffic to obtain the admin password and log in as admin. Multiple sources (Talos advisories TALOS-2017-0475, -0479, and related reports...

Moxa EDR-810 Cleartext Transmission of Password Vulnerability(CVE-2017-12123)

Summary An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as...