PT-2018-5370 · Moxa · Moxa Edr-810

CVE-2017-12129

·

Publicado

2018-05-14

·

Atualizado

2022-12-09

CVSS v3.1

8.0

Alta

VetorAV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Moxa EDR-810 version 4.1 build 17030317
Description A weakness in cryptography for passwords exists in the web server functionality, allowing an attacker to intercept weakly encrypted passwords and potentially brute force them.
Recommendations For Moxa EDR-810 version 4.1 build 17030317, consider changing passwords to strong, unique ones and avoid using the same password across multiple devices or services until a fix is available. As a temporary workaround, restrict access to the web server functionality to minimize the risk of exploitation.

Exploit

Correção

Use of a Broken Cryptographic Algorithm

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2017-12129

Produtos afetados

Moxa Edr-810