CVE-2012-4712

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-02-15 · updated 2026-06-16
Weakness: CWE-798

Description

Moxa EDR-G903 series routers with firmware before 2.11 have a hardcoded account, which allows remote attackers to obtain unspecified device access via unknown vectors.

Affected products

Moxa Edr-G903 Firmware: before 2.11 — fixed in 2.11

How to fix

Upgrade to a fixed version: Moxa Edr-G903 Firmware 2.11. Check the vendor advisory for mitigations.

References

http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf
http://www.moxa.com/support/download.aspx?type=support&id=492
http://ics-cert.us-cert.gov/pdf/ICSA-13-042-01.pdf
http://www.moxa.com/support/download.aspx?type=support&id=492

Get alerted when CVE-2012-4712 or the next vulnerability affects your stack