60
CVE-2017-12123
PoC —CVSS 3.1
8.8 high
EPSS
1%p62
Published
()
Modified
Description
An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.
- Vendors
- moxa
- Products
- edr-810 firmware
- Weakness
- CWE-522
- Vector
- CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H