CVE-2017-12126

CVE-2017-12126 is a CSRF vulnerability in the web server of the Moxa EDR-810 (V4.1, build 17030317). A specially crafted HTTP request can trigger cross-site request forgery, potentially changing device configuration when a logged-in user visits a malicious page. The exploitation details are docum...

Moxa EDR-810 Web Server Cross-Site Request Forgery Vulnerability(CVE-2017-12126)

Summary An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP packet can cause cross-site request forgery. An attacker can create malicious HTML to trigger this vulnerability. Tested Versions Mo...