Talos Moxa

Name: Talos Moxa
Brand: Talos

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical15high2medium0low

updated 2026-10-28

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-14459US	critical9.8	12.6% (96th)	Exploit	no fix	2018-04-11	≤ Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client versions 1.4 - 1.9. In addition, versions prior to 1.4 appear similarly vulnerable to injection, but not as easily exploitable (described below). Other models in the AWK product line may likewise be vulnerable but have not been tested.
CVE-2017-12128US	high7.5	40.1% (99th)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-14433US	high8.8	4.45% (91st)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12121US	high8.8	4.26% (91st)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12120US	high8.8	4.26% (91st)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-14434US	high8.8	4.14% (91st)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-14432US	high8.8	4.14% (91st)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12125US	high8.8	3.96% (90th)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-14437US	high7.5	2.11% (82nd)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-14436US	high7.5	2.11% (82nd)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-14435US	high7.5	2.11% (82nd)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2016-8717US	critical9.8OT elevated	2.10% (82nd)	—	no fix	2018-04-02	≤ Moxa AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client 1.1
CVE-2017-14438US	high7.5	1.85% (79th)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12124US	medium6.5	1.82% (79th)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-14439US	high7.5	1.78% (78th)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12123US	high8.8	1.01% (63rd)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12126US	high8.8	0.98% (62nd)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12129US	high8.0OT elevated	0.63% (50th)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317
CVE-2017-12127US	medium4.4	0.43% (37th)	—	no fix	2018-05-14	≤ Moxa EDR-810 V4.1 build 17030317

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')7 CVEs
CWE-476NULL Pointer Dereference4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-321Use of Hard-coded Cryptographic Key1 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)19 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan