CVE-2017-12121

CVE-2017-12121 describes a critical command injection vulnerability in the web server functionality of Moxa EDR-810 V4.1 build 17030317, specifically within the "/goform/WebRSAKEYGen" URI. An authenticated attacker can exploit this by injecting OS commands into the "rsakey_name" parameter of a specially crafted HTTP POST request. This allows for privilege escalation, potentially leading to a root shell on the affected device. The vulnerability carries a CVSS v3.1 score of 8.8 (High), indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is currently available, and it is not listed in CISA's KEV catalog, the potential for a full system compromise remains significant. Despite its high severity, CVE-2017-12121 shows minimal community discussion and media coverage, suggesting a low public profile. This lack of attention does not diminish the inherent risk, and organizations using affected Moxa EDR-810 devices should prioritize patching or implementing mitigating controls.