Moxa MXview CVE-2017-14030 Local Privilege Escalation Vulnerability

Bugtraq ID:	102494
Class:	Design Error
CVE:	CVE-2017-14030
Remote:	No
Local:	Yes
Published:	Jan 11 2018 12:00AM
Updated:	Jan 11 2018 12:00AM
Credit:	Karn Ganeshen
Vulnerable:	Moxa MXview 2.8
Not Vulnerable:	Moxa MXview 2.9

Moxa MXview CVE-2017-14030 Local Privilege Escalation Vulnerability

Moxa MXview is prone to a local privilege-escalation vulnerability.

Attackers can exploit this issue to execute arbitrary code with elevated privileges.

Moxa MXview 2.8 and prior versions are vulnerable.

Moxa MXview CVE-2017-14030 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Moxa MXview CVE-2017-14030 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moxa MXview CVE-2017-14030 Local Privilege Escalation Vulnerability

References:

• Moxa Homepage (Moxa)
  
• MXview homepage (Moxa)
  
• Advisory (ICSA-18-011-02) Moxa MXview (ICS CERT)