Talos Moxa
19 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-14439 | Moxa EDR-810 V4.1 build 17030317 | Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially cra | HIGH 7.5 | 1.8 % | ||
| CVE-2017-14438 | Moxa EDR-810 V4.1 build 17030317 | Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially cra | HIGH 7.5 | 1.9 % | ||
| CVE-2017-14437 | Moxa EDR-810 V4.1 build 17030317 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 7.5 | 2.1 % | ||
| CVE-2017-14436 | Moxa EDR-810 V4.1 build 17030317 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 7.5 | 2.1 % | ||
| CVE-2017-14435 | Moxa EDR-810 V4.1 build 17030317 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 7.5 | 2.1 % | ||
| CVE-2017-14434 | Moxa EDR-810 V4.1 build 17030317 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 8.8 | 4.1 % | ||
| CVE-2017-14433 | Moxa EDR-810 V4.1 build 17030317 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 8.8 | 4.4 % | ||
| CVE-2017-14432 | Moxa EDR-810 V4.1 build 17030317 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 8.8 | 4.1 % | ||
| CVE-2017-12129 | Moxa EDR-810 V4.1 build 17030317 | An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An | HIGH 8.0 | 0.6 % | ||
| CVE-2017-12128 | Moxa EDR-810 V4.1 build 17030317 | An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A speciall | HIGH 7.5 | 40 % | ||
| CVE-2017-12127 | Moxa EDR-810 V4.1 build 17030317 | A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell ac | MEDIUM 4.4 | 0.4 % | ||
| CVE-2017-12126 | Moxa EDR-810 V4.1 build 17030317 | An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specia | HIGH 8.8 | 1.0 % | ||
| CVE-2017-12125 | Moxa EDR-810 V4.1 build 17030317 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 8.8 | 4.0 % | ||
| CVE-2017-12124 | Moxa EDR-810 V4.1 build 17030317 | An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 7.5 | 1.8 % | ||
| CVE-2017-12123 | Moxa EDR-810 V4.1 build 17030317 | An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 buil | HIGH 8.8 | 1.0 % | ||
| CVE-2017-12121 | Moxa EDR-810 V4.1 build 17030317 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 8.8 | 4.3 % | ||
| CVE-2017-12120 | Moxa EDR-810 V4.1 build 17030317 | An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially craft | HIGH 8.8 | 4.3 % | ||
| CVE-2017-14459 | Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client versions 1.4 - 1.9. In addition, versions prior to 1.4 appear similarly vulnerable to injection, but not as easily exploitable (described below). Other models in the AWK product line may likewise be vulnerable but have not been tested. | An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IE | CRITICAL 10.0 | 13 % | ||
| CVE-2016-8717 | Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client 1.1 | An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The devi | CRITICAL 10.0 | 2.1 % |