Unscored severity · published Feb 15, 2013
CVE-2012-4712
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors
–
CVSS
1.9%
EPSS
No
On KEV
Description
Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EF
Edr-g903 Firmware · Moxa
before 2.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4712
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4712
Broken Link
http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf
Vendor Advisory
http://www.moxa.com/support/download.aspx?type=support&id=492
More from Edr-g903 Firmware
9.8
CVE-2020-28144
Certain Moxa Inc products are affected by an improper restriction of operations in EDR-G903 Series Firmware Version 5.5 or lower, EDR-G902 Series Firmware Version 5.5 or lower,…
9.8
CVE-2020-14511
Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series Routers (versions prior…
7.5
CVE-2023-4452
A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability
7.5
CVE-2016-0879
Moxa Secure Router EDR-G903 devices before 3.4.12 do not delete copies of configuration and log files after completing the import function, which allows remote attackers to obtain…
7.5
CVE-2016-0878
Moxa Secure Router EDR-G903 devices before 3.4.12 allow remote attackers to cause a denial of service (cold start) by sending two crafted ping requests