CVE-2017-14434: Moxa Edr-810 Firmware

High severity, CVSS 8.8. EPSS: 4.1% chance of exploitation in the next 30 days.

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 17030317. A specially crafted HTTP POST can cause a privilege escalation resulting in root shell. An attacker can inject OS commands into the remoteNetmask0= parameter in the "/goform/net\_Web\_get_value" uri to trigger this vulnerability.

Affected products

• Moxa Edr-810 Firmware: version 4.1 only

Published 2018-05-14. Last modified 2026-06-17.