CVE-2017-12120: Moxa Edr-810 Firmware

High severity, CVSS 8.8. EPSS: 4.3% chance of exploitation in the next 30 days.

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation, resulting in a root shell. An attacker can inject OS commands into the ip= parm in the "/goform/net_WebPingGetValue" URI to trigger this vulnerability.

Affected products

• Moxa Edr-810 Firmware: version 4.1 only

Published 2018-05-14. Last modified 2026-06-17.