high7.5Public exploit code
CVE-2017-7455
Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Moxa MXview 2.8 - Private Key Disclosure2017-04-10 · remote · windows
Impact
Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moxa | Mxview | Version 2.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-REMOTE-PRIVATE-KEY-DISCLOSURE.txt
- http://packetstormsecurity.com/files/142074/Moxa-MXview-2.8-Private-Key-Disclosure.html
- http://seclists.org/fulldisclosure/2017/Apr/49
- https://www.exploit-db.com/exploits/41850/
- http://hyp3rlinx.altervista.org/advisories/MOXA-MXVIEW-v2.8-REMOTE-PRIVATE-KEY-DISCLOSURE.txt
- http://packetstormsecurity.com/files/142074/Moxa-MXview-2.8-Private-Key-Disclosure.html
- http://seclists.org/fulldisclosure/2017/Apr/49
- https://www.exploit-db.com/exploits/41850/