CVE-2017-12125: Moxa Edr-810 Firmware

High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days.

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the CN= parm in the "/goform/net_WebCSRGen" uri to trigger this vulnerability.

Affected products

• Moxa Edr-810 Firmware: version 4.1 only

Published 2018-05-14. Last modified 2026-06-17.