CVE-2017-14030 Privilege escalation in Moxa MXview

What is CVE-2017-14030?

CVE-2017-14030 is a high-severity vulnerability in Moxa MXview, published on 12 Jan 2018. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path.

Weakness: CWE-428

Which versions are affected by CVE-2017-14030?

It affects 1 product.

Products include Moxa Mxview.

How do I fix CVE-2017-14030?

No fix has been published for CVE-2017-14030 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-14030 being exploited?

There is no known exploitation of CVE-2017-14030 in the wild and no public exploit code.

Other vulnerabilities in Moxa MXview

• CVE-2021-40390 Auth bypass in MXView Series Critical 10.0
• CVE-2021-38454 Moxa MXview Network Management Software Critical 10.0
• CVE-2021-38456 Moxa MXview Network Management Software Critical 9.8
• CVE-2021-38458 Moxa MXview Network Management Software Critical 9.8
• CVE-2020-13536 Privilege escalation in Moxa Critical 9.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-pmxr-xmgm-6hr9.