CVE-2017-12123

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317

Medium · published May 14, 2018

CVSS v3.0
5.7
EPSS
1%
Percentile
63.5
In the wild
Unconfirmed
What it is

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at network traffic to get the admin password for the device. The attacker can then use the credentials to login as admin.

The record
Technical detail
CVSS v3.0
5.7 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01033 · 63.5th percentile
Published
2018-05-14T20:00Z
EPSS history
Timeline
  • 14 MAY 20:00Z
    An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317
    cvelistv5