CVE-2017-12128

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317

Medium · published May 14, 2018

CVSS v3.0

5.3

EPSS

41%

Percentile

98.7

In the wild

Unconfirmed

What it is

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigger this vulnerability.

The record

Technical detail

CVSS v3.0: 5.3 · MEDIUM
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.40721 · 98.7th percentile
Published: 2018-05-14T20:00Z

EPSS history

Timeline

14 MAY 20:00Z
An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317
cvelistv5