CVE-2017-16727

A Credentials Management issue was discovered in Moxa NPort W2150A versions prior to 1.11, and NPort W2250A versions prior to 1.11. The default password is empty on the device. An unauthorized user can access the device without a password. An unauthorized user has the ability to completely compromise the confidentiality and integrity of the wireless traffic.

• CWE-255
• CWE-521

• http://www.securityfocus.com/bid/102254Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01Patch, Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/102254Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-17-355-01Patch, Third Party Advisory, US Government Resource

Published

Dec 22, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-16720A Path Traversal issue was discovered in WebAccess versions …
• CVE-2017-16721A Cross-site Scripting issue was discovered in Geovap Relian…6.1
• CVE-2017-16723A Cross-site Scripting issue was discovered in PHOENIX CONTA…
• CVE-2017-16724A Stack-based Buffer Overflow issue was discovered in Advant…
• CVE-2017-16725A Stack-based Buffer Overflow issue was discovered in Xiongm…
• CVE-2017-16726Beckhoff TwinCAT supports communication over ADS. ADS is a p…
• CVE-2017-16728An Untrusted Pointer Dereference issue was discovered in Adv…
• CVE-2017-1673IBM Tivoli Key Lifecycle Manager 2.5, 2.6, and 2.7 is vulner…
• CVE-2017-16731An Unprotected Transport of Credentials issue was discovered…
• CVE-2017-16732A use-after-free issue was discovered in Advantech WebAccess…
• CVE-2017-16733A SQL Injection issue was discovered in Ecava IntegraXor v 6…
• CVE-2017-16735A SQL Injection issue was discovered in Ecava IntegraXor v 6…