CVE-2017-12123
Published: May 14, 2018
Modified: Sep 16, 2024
CVSS v3.0
5.7
Description
An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.
| Vendor | Product | Versions |
|---|---|---|
Talos | Moxa | affected Moxa EDR-810 V4.1 build 17030317 |
CVSS v3.0 Details
CVSS v3.0 Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now