CVE-2017-12123

Name of the Vulnerable Software and Affected Versions Moxa EDR-810 version 4.1 build 17030317

Description A clear text transmission of password issue exists in the web server and telnet functionality. An attacker can intercept network traffic to obtain the admin password for the device, and then use the credentials to login as admin.

Recommendations For Moxa EDR-810 version 4.1 build 17030317, consider restricting access to the telnet functionality and web server until a fix is available. As a temporary workaround, avoid using the telnet and web server functionalities to minimize the risk of exploitation.