Strix
26.1K

CVE-2017-12123

HIGHCVSS 8.8/10EPSS 1.05%

Last modified

CVE-2017-12123 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. EPSS estimates a 1.05% chance of exploitation in the next 30 days.

Description

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
1.05%

59.9th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
MoxaEdr-810 Firmware4.1

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2017-12123?
An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.
How severe is CVE-2017-12123?
CVE-2017-12123 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 1.05% probability of exploitation in the next 30 days.
How do I fix CVE-2017-12123?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2017-12123?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST