CVE-2017-12126

CVE-2017-12126 is a CSRF vulnerability in the web server of the Moxa EDR-810 (V4.1, build 17030317). A specially crafted HTTP request can trigger cross-site request forgery, potentially changing device configuration when a logged-in user visits a malicious page. The exploitation details are docum...

CVE-2017-14438

CVE-2017-14438 affects the Moxa EDR-810 Industrial Secure Router (V4.1, build 17030317). The vulnerability lies in the Service Agent: sending a specially crafted large TCP packet to port 4000 (and 4001) can cause a denial-of-service crash. Talos reports the issue on ports 4000/tcp and 4001/tcp wi...

CVE-2017-12128

CVE-2017-12128 affects Moxa EDR-810, specifically the Server Agent in version 4.1 build 17030317. A crafted TCP packet (0x21) over TCP/4000 can trigger an information-disclosure vulnerability, exposing device data (model, firmware, serial, location, MAC, IP mask, etc.). Public writeups from Talos...

CVE-2017-12121

The CVE-2017-12121 issue affects Moxa EDR-810 Web RSA Key Generation functionality. Talos reports a command-injection in the rsakey_name parameter of the /goform/WebRSAKEYGen POST, enabling privilege escalation to root when authenticated. A root shell can be obtained via crafted input; affected p...

CVE-2017-14435

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\CFG.ini" without a cookie heade...

CVE-2017-12127

A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear text from the device...

CVE-2017-12121

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the rsakey\name= parm in the...

CVE-2017-12129

An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them...

CVE-2017-14434

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the remoteNetmask0= parameter in the...

CVE-2017-14437

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\LOG.ini" without a cookie heade...

CVE-2017-14436

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\CFG2.ini" without a cookie head...

CVE-2017-12120

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation, resulting in a root shell. An attacker can inject OS commands into the ip= parm in the...

CVE-2017-12124

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in the web server crashing. An attacker can send a crafted URI to trigger this vulnerability...

CVE-2017-14433

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the remoteNetwork0= parameter in the...

CVE-2017-14435

CVE-2017-14435 affects Moxa EDR-810 Web Server on version 4.1 build 17030317. A null pointer dereference in the web server can be triggered by a crafted HTTP URI, specifically by sending a GET to /MOXA_CFG.ini (and related endpoints such as /MOXA_LOG.ini or /MOXA_CFG2.ini) without a cookie header...

CVE-2017-12129

CVE-2017-12129 affects Moxa EDR-810 Web Server. Cisco Talos reports a weakness in cryptography for passwords: after login, each authenticated request sends a MD5-hashed password (not salted), enabling cracking of the password and potential compromise of the device. Affected product/version: Moxa ...

CVE-2017-12127

CVE-2017-12127 affects Moxa EDR-810 (V4.1, build 17030317). A password storage vulnerability allows an attacker with shell access to read plaintext credentials from /magicP/cfg4.0/cfg_file/USER_ACCOUNT.CFG (mirrors /etc/shadow). CVSSv3.0 score ~4.4 (MEDIUM) with LOCAL access and HIGH confidential...

CVE-2017-12125

CVE-2017-12125 affects Moxa EDR-810 Web Server (V4.1, build 17030317). A crafted HTTP POST to /goform/net_WebCSRGen allows OS command injection via the CN parameter, enabling privilege escalation to a root shell. Public references (Talos/Talos blog, NVD, NASL plugin) describe the same vulnerabili...

CVE-2017-12123

CVE-2017-12123 affects Moxa EDR-810 (V4.1 build 17030317). The web server and Telnet allow a cleartext transmission of passwords ; an attacker can sniff network traffic to obtain the admin password and log in as admin. Multiple sources (Talos advisories TALOS-2017-0475, -0479, and related reports...

CVE-2017-14433

CVE-2017-14433 affects Moxa EDR-810 web server (V4.1, build 17030317). A command-injection flaw in the Web interface allows OS commands to be injected via the remoteNetwork0 parameter in POST requests to /goform/net_Web_get_value, enabling privilege escalation to a root shell. TALOS reports the i...