CVE-2017-12120

CVE-2017-12120 is a high-severity command injection vulnerability affecting Moxa EDR-810 devices running firmware V4.1 build 17030317. An authenticated attacker can exploit this flaw by injecting OS commands into the 'ip' parameter of a specially crafted HTTP POST request to the "/goform/net_WebPingGetValue" URI. Successful exploitation leads to privilege escalation, granting the attacker a root shell on the device. While the CVSS score is 8.8 (High), there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.