VULNERABILITY INTELLIGENCE
CVE-2017-12129
CVSS score8 HIGH
EPSS probability0.64%
CISA KEVNot currently listed
Published2018-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypted passwords and could brute force them.
Weakness classification
- CWE-327: Use of a Broken or Risky Cryptographic Algorithm
Primary references
- talos-cna@cisco.com — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory