What is CVE-2017-12123?

CVE-2017-12123 is a high-severity vulnerability in Moxa Edr-810, classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2018-05-14.

How severe is CVE-2017-12123?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Moxa Edr-810

CVE-2017-12123

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

EPSS: 0.010 (60.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Moxa Edr-810
Moxa Edr-810_firmware — versions 4.1
Talos Moxa — versions Moxa EDR-810 V4.1 build 17030317

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

talos-cna@cisco.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2017-12123?: CVE-2017-12123 is a high-severity vulnerability in Moxa Edr-810, classified under Insufficiently Protected Credentials. CVSS score: 8.8/10. Published 2018-05-14.
How severe is CVE-2017-12123?: High severity. CVSS v3 base score is 8.8 out of 10.