What is CVE-2017-12123?

CVE-2017-12123 is a high-severity vulnerability in Moxa Edr-810, classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2018-05-14.

How severe is CVE-2017-12123?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Moxa Edr-810

CVE-2017-12123

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

Published 2018-05-14 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.010 (62.3th percentile), scored 2026-09-29.

Low probability of exploitation in the next 30 days, but still tracked. 62nd percentile — 62.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.010 · newest: 0.010 · change: -0.000

Affected products

Moxa Edr-810
Moxa Edr-810 Firmware — versions 4.1
Talos Moxa — versions Moxa EDR-810 V4.1 build 17030317

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

www.talosintelligence.com/vulnerability_reports/TALOS-2017-0475 (Exploit, Third Party Advisory)

Frequently asked questions

What is CVE-2017-12123?: CVE-2017-12123 is a high-severity vulnerability in Moxa Edr-810, classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2018-05-14.
How severe is CVE-2017-12123?: High severity. CVSS v3 base score is 8.8 out of 10.