Read the docs

Moxa

Records329All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical79CVSS 9.0–10.0
CVSS high181CVSS 7.0–8.9

Exploited now

Moxa records in CISA KEV

No Moxa vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Awk-3131a Firmware 28 records MEDIUM Edr-810 Firmware 21 records MEDIUM Awk-3121 Firmware 14 records MEDIUM Eds-405a Firmware 13 records MEDIUM Eds-408a Firmware 13 records MEDIUM Mxview 13 records HIGH Tn-5900 Firmware 11 records MEDIUM Eds-510a Firmware 10 records MEDIUM

Records

21 records in Edr-810 Firmware · all components

TI-2017-08921 CVE-2017-12128 · GHSA-xw39-p8g9-hq9j

Information disclosure in Talos Moxa

Priority MEDIUM 60

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.40116 Published 2018-05-14 No fix listed CWE-200
TI-2018-11662 CVE-2018-16282 · GHSA-6xc3-4939-rjv8

A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2…

Priority MEDIUM 46

A command injection vulnerability in the web server functionality of Moxa EDR-810 V4.2 build 18041013 allows remote attackers to execute arbitrary OS commands with root privilege via the caname parameter to the /xml/net_…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05251 Published 2018-09-20 No fix listed CWE-78
TI-2017-10541 CVE-2017-14434 · GHSA-h522-79gf-rp4c

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04136 Published 2018-05-14 No fix listed CWE-78
TI-2017-10540 CVE-2017-14433 · GHSA-hrxh-pxp2-7h7h

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04448 Published 2018-05-14 No fix listed CWE-78
TI-2017-10539 CVE-2017-14432 · GHSA-r983-jx22-f3fr

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04136 Published 2018-05-14 No fix listed CWE-78
TI-2017-08918 CVE-2017-12125 · GHSA-3p5q-5ghh-h456

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03962 Published 2018-05-14 No fix listed CWE-78
TI-2017-08914 CVE-2017-12121 · GHSA-7cj3-pvh2-r7mg

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04262 Published 2018-05-14 No fix listed CWE-78
TI-2017-08913 CVE-2017-12120 · GHSA-5p7m-fwc2-2ggr

OS command injection in Talos Moxa

Priority MEDIUM 45

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04262 Published 2018-05-14 No fix listed CWE-78
TI-2019-08188 CVE-2019-10969 · GHSA-vj73-6vqh-xccv

Improper input validation in Moxa EDR 810

Priority MEDIUM 44

Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.10622 Published 2019-10-08 No fix listed CWE-20
TI-2017-08919 CVE-2017-12126 · GHSA-5jr9-r58p-jc88

Cross-site request forgery in Talos Moxa

Priority MEDIUM 40

An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00976 Published 2018-05-14 No fix listed CWE-352
TI-2017-08916 CVE-2017-12123 · GHSA-q73q-mh85-fcv8

Insufficiently protected credentials in Talos Moxa

Priority MEDIUM 40

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01013 Published 2018-05-14 No fix listed CWE-522
TI-2017-10545 CVE-2017-14438 · GHSA-2rxv-434v-p63q

Improper input validation in Talos Moxa

Priority LOW 37

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01855 Published 2018-05-14 No fix listed CWE-20
TI-2017-10544 CVE-2017-14437 · GHSA-7xgq-gwww-x5c6

NULL pointer dereference in Talos Moxa

Priority LOW 37

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02115 Published 2018-05-14 No fix listed CWE-476
TI-2017-10543 CVE-2017-14436 · GHSA-6444-6h76-2fx4

NULL pointer dereference in Talos Moxa

Priority LOW 37

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02115 Published 2018-05-14 No fix listed CWE-476
TI-2017-10542 CVE-2017-14435 · GHSA-hwvw-78mc-v67r

NULL pointer dereference in Talos Moxa

Priority LOW 37

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02115 Published 2018-05-14 No fix listed CWE-476
TI-2017-10546 CVE-2017-14439 · GHSA-7v9w-wvcc-rp5c

Improper input validation in Talos Moxa

Priority LOW 36

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01776 Published 2018-05-14 No fix listed CWE-20
TI-2017-08922 CVE-2017-12129 · GHSA-rf4h-9cj8-vph5

Broken or risky cryptographic algorithm in Talos Moxa

Priority LOW 36

An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00625 Published 2018-05-14 No fix listed CWE-327
TI-2017-08917 CVE-2017-12124 · GHSA-c6f7-8cjh-69hm

Improper input validation in Talos Moxa

Priority LOW 32

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01818 Published 2018-05-14 No fix listed CWE-20
TI-2017-08920 CVE-2017-12127 · GHSA-xq97-wjxv-m4j7

Insufficiently protected credentials in Talos Moxa

Priority LOW 21

A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317.

CVSS 3.1MEDIUM 4.4 Local High privileges No interaction EPSS 0.00425 Published 2018-05-14 No fix listed CWE-522
Open these records in search →