Approved changes feed: RSS · Atom

cpe:2.3:a:talos:moxa:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTalos (e7c02545-e938-5775-90a6-6bebb73bfb47)
ProductMoxa (0a1386c6-6515-539e-b831-4c8780a97ed5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-14459 vulnerable 2026-06-08 05:08:49.980045 Details available
CRITICAL (10)
An exploitable OS Command Injection vulnerability exists in the Telnet, SSH, and console login functionality of Moxa AWK-3131A Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client in firmware versions 1.4 to 1.7 (current). An attacker can inject commands via the username parameter of several services (SSH, Telnet, console), resulting in remote, unauthenticated, root-level operating system command execution.
Published: 2018-04-11T16:00:00.000Z
Updated: 2024-09-16T23:55:35.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14439 vulnerable 2026-06-08 05:08:49.954823 Details available
HIGH (7.5)
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4001/tcp to trigger this vulnerability.
Published: 2018-05-14T20:00:00.000Z
Updated: 2024-09-17T00:15:38.598Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14438 vulnerable 2026-06-08 05:08:49.954498 Details available
HIGH (7.5)
Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted packet can cause a denial of service. An attacker can send a large packet to 4000/tcp to trigger this vulnerability.
Published: 2018-05-14T20:00:00.000Z
Updated: 2024-09-17T02:02:46.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14437 vulnerable 2026-06-08 05:08:49.954174 Details available
HIGH (7.5)
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\_LOG.ini" without a cookie header to trigger this vulnerability.
Published: 2018-05-14T20:00:00.000Z
Updated: 2024-09-16T22:45:06.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14436 vulnerable 2026-06-08 05:08:49.953840 Details available
HIGH (7.5)
An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP URI can cause a null pointer dereference resulting in denial of service. An attacker can send a GET request to "/MOXA\_CFG2.ini" without a cookie header to trigger this vulnerability.
Published: 2018-05-14T20:00:00.000Z
Updated: 2024-09-17T02:06:23.852Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14435 vulnerable 2026-06-08 05:08:49.953491 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14434 vulnerable 2026-06-08 05:08:49.953148 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14433 vulnerable 2026-06-08 05:08:49.952804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-14432 vulnerable 2026-06-08 05:08:49.952428 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12129 vulnerable 2026-06-08 05:08:45.324896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12128 vulnerable 2026-06-08 05:08:45.324573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12127 vulnerable 2026-06-08 05:08:45.324237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12126 vulnerable 2026-06-08 05:08:45.323878 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12125 vulnerable 2026-06-08 05:08:45.323546 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12124 vulnerable 2026-06-08 05:08:45.323100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12123 vulnerable 2026-06-08 05:08:45.322626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12121 vulnerable 2026-06-08 05:08:45.319059 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-12120 vulnerable 2026-06-08 05:08:45.317185 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-8717 vulnerable 2026-06-08 05:08:14.651524 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.