Talos Moxa
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
2critical15high2medium0low
updated 2026-10-30
01
vulnerabilities (19)
Related CVEs.
| ID | severity | exploitable | ||||
|---|---|---|---|---|---|---|
| CVE-2017-14459US | critical9.8 | Exploit | ||||
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/clie… | ||||||
| CVE-2017-12128US | high7.5 | — | ||||
An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause informati… | ||||||
| CVE-2017-14433US | high8.8 | — | ||||
An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escal… | ||||||
| CVE-2017-12121US | high8.8 | — | ||||
An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escal… | ||||||
| CVE-2017-12120US | high8.8 | — | ||||
An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escal… | ||||||
| CVE-2017-14434US | high8.8 | — | ||||
An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escal… | ||||||
| CVE-2017-14432US | high8.8 | — | ||||
An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escal… | ||||||
| CVE-2017-12125US | high8.8 | — | ||||
An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escal… | ||||||
| CVE-2017-14437US | high7.5 | — | ||||
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer der… | ||||||
| CVE-2017-14436US | high7.5 | — | ||||
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer der… | ||||||
| CVE-2017-14435US | high7.5 | — | ||||
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer der… | ||||||
| CVE-2016-8717US | critical9.8OT elevated | — | ||||
An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocume… | ||||||
| CVE-2017-14438US | high7.5 | — | ||||
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of servic… | ||||||
| CVE-2017-12124US | medium6.5 | — | ||||
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer der… | ||||||
| CVE-2017-14439US | high7.5 | — | ||||
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of servic… | ||||||
| CVE-2017-12123US | high8.8 | — | ||||
An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Moxa EDR-810 V4.1 build 17030317. An attacker can look at netw… | ||||||
| CVE-2017-12126US | high8.8 | — | ||||
An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP packet can cause cross-… | ||||||
| CVE-2017-12129US | high8.0OT elevated | — | ||||
An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. An attacker could intercept weakly encrypte… | ||||||
| CVE-2017-12127US | medium4.4 | — | ||||
A password storage vulnerability exists in the operating system functionality of Moxa EDR-810 V4.1 build 17030317. An attacker with shell access could extract passwords in clear te… | ||||||
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-78Improper Neutralization of Special Elements used in an OS Command7 CVEs
- CWE-476NULL Pointer Dereference4 CVEs
- CWE-20Improper Input Validation3 CVEs
- CWE-522Insufficiently Protected Credentials2 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
- CWE-321Use of Hard-coded Cryptographic Key1 CVEs
- CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
- CWE-352Cross-Site Request Forgery1 CVEs
03
sources (1)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)19 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan