Known vulnerabilities in Moxa EDR-810 4.1

Known vulnerabilities in Moxa EDR-810 4.1

Vendor: Moxa

Software: Moxa EDR-810

Version: 4.1

Software CPE: cpe:2.3:a:moxa:moxa_edr-810:*:*:*:*:*:*:*:*

Website: https://www.moxa.com/

Total vulnerabilities: 17

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU11876 - Unprotected Storage of Credentials CVE-2017-12127	CWE-256	Low	No	No	-	18.04.2018	SB2018041804
#VU11875 - Cross-Site Request Forgery (CSRF) CVE-2017-12126	CWE-352	Low	No	No	-	18.04.2018	SB2018041804
#VU11874 - Exposure of sensitive information to an unauthorized actor CVE-2017-12128	CWE-200	Low	No	No	-	18.04.2018	SB2018041804
#VU11873 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2017-12125	CWE-78	Low	No	No	-	18.04.2018	SB2018041804
#VU11872 - NULL Pointer Dereference CVE-2017-12124	CWE-476	Low	No	No	-	18.04.2018	SB2018041804
#VU11871 - Cleartext Transmission of Sensitive Information CVE-2017-12123	CWE-319	Low	No	No	-	18.04.2018	SB2018041804
#VU11870 - NULL Pointer Dereference CVE-2017-14437	CWE-476	Low	No	No	-	18.04.2018	SB2018041804
#VU11869 - NULL Pointer Dereference CVE-2017-14436	CWE-476	Low	No	No	-	18.04.2018	SB2018041804
#VU11868 - NULL Pointer Dereference CVE-2017-14435	CWE-476	Low	No	No	-	18.04.2018	SB2018041804
#VU11867 - Improper input validation CVE-2017-14439	CWE-20	Low	No	No	-	18.04.2018	SB2018041804
#VU11866 - Improper input validation CVE-2017-14438	CWE-20	Low	No	No	-	18.04.2018	SB2018041804
#VU11865 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2017-12121	CWE-78	Low	No	No	-	18.04.2018	SB2018041804
#VU11864 - Weak Cryptography for Passwords CVE-2017-12129	CWE-261	Low	No	No	-	18.04.2018	SB2018041804
#VU11863 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2017-14434	CWE-78	Low	No	No	-	18.04.2018	SB2018041804
#VU11862 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2017-14433	CWE-78	Low	No	No	-	18.04.2018	SB2018041804
#VU11861 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2017-14432	CWE-78	Low	No	No	-	18.04.2018	SB2018041804
#VU11860 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2017-12120	CWE-78	Low	No	No	-	18.04.2018	SB2018041804