CVE-2017-12128: Infoleak

Published May 14, 2018

Updated

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted TCP packet can cause information disclosure. An attacker can send a crafted TCP packet to trigger this vulnerability.

Affected Software

2 affected components

MOXA Edr-810 Firmware=4.1

MOXA EDR-810

Event History

May 14, 2018

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2017-12128?

CVE-2017-12128 is categorized as an information disclosure vulnerability which can be exploited by attackers.

How do I fix CVE-2017-12128?

To mitigate CVE-2017-12128, users should update the Moxa EDR-810 to the latest version of firmware available.

Who is affected by CVE-2017-12128?

CVE-2017-12128 affects users of Moxa EDR-810 running firmware version 4.1.

What type of vulnerability is CVE-2017-12128?

CVE-2017-12128 is an information disclosure vulnerability resulting from improper handling of specially crafted TCP packets.

Can CVE-2017-12128 be exploited remotely?

Yes, CVE-2017-12128 can be exploited by an attacker sending a specially crafted TCP packet remotely.