CVE-2017-7455

Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

• CWE-200

• http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-REMOTE-PRIVATE-KEY-DISCLOSURE.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/142074/Moxa-MXview-2.8-Private-Key-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Apr/49Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/41850/
• http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-REMOTE-PRIVATE-KEY-DISCLOSURE.txtExploit, Third Party Advisory
• http://packetstormsecurity.com/files/142074/Moxa-MXview-2.8-Private-Key-Disclosure.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Apr/49Exploit, Mailing List, Third Party Advisory
• https://www.exploit-db.com/exploits/41850/

Published

Apr 14, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7447HelpDEZk 1.1.1 has CSRF in admin/home#/logos/ with an impact…
• CVE-2017-7448The allocate_channel_framebuffer function in uncompressed_co…
• CVE-2017-7450AIRTAME HDMI dongle with firmware before 2.2.0 allows unauth…
• CVE-2017-7452The iwbmp_read_info_header function in imagew-bmp.c in libim…
• CVE-2017-7453The iwgif_record_pixel function in imagew-gif.c in libimagew…
• CVE-2017-7454The iwgif_record_pixel function in imagew-gif.c in libimagew…
• CVE-2017-7456Moxa MXView 2.8 allows remote attackers to cause a Denial of…
• CVE-2017-7457XML External Entity via ".AOP" files used by Moxa MX-AOPC Se…
• CVE-2017-7458The NetworkInterface::getHost function in NetworkInterface.c…
• CVE-2017-7459ntopng before 3.0 allows HTTP Response Splitting.
• CVE-2017-7461Directory traversal vulnerability in the web-based managemen…
• CVE-2017-7462Intellinet NFC-30ir IP Camera has a vendor backdoor that can…