PT-2018-5635 · Moxa · Moxa Edr-810

Published 2018-05-14 · Updated 2022-12-09 · CVE-2017-14434

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Moxa EDR-810 version 4.1 build 17030317

Description: A command injection issue exists in the web server functionality, allowing for privilege escalation to root shell. This can be triggered by injecting OS commands into the remoteNetmask0 parameter in the "/goform/net Web get value" API endpoint via a specially crafted HTTP POST request.

Recommendations: For Moxa EDR-810 version 4.1 build 17030317, consider restricting access to the "/goform/net Web get value" API endpoint to minimize the risk of exploitation. Avoid using the remoteNetmask0 parameter in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2017-14434

Affected Products

Moxa Edr-810

References · 3

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2017-0482 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-14434 · Security Note
• https://osv.dev/vulnerability/CVE-2017-14434 · Vendor Advisory