VULNERABILITY INTELLIGENCE

CVE-2017-12123

CVSS score8.8 HIGH
EPSS probability1.01%
CISA KEVNot currently listed
Published2018-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

Weakness classification

  • CWE-522: Insufficiently Protected Credentials

Primary references