Vulnerability

CVE-2024-12297 (CVSS 9.2): Critical Authorization Vulnerability in Moxa EDS-508A Series

Do Son January 18, 2025 2 minutes read

Moxa Hard-Coded Credentials, Critical JWT Bypass CVE-2024-9137 and CVE-2024-9139 - CVE-2024-12297 CVE-2024-7695 CVE-2024-9404 CVE-2024-12297 CVE-2025-0415

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Leave a Reply Cancel reply

You must be logged in to post a comment.

📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo

CVE-2026-87491
Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute...
Admin intel📅 Updated: Sep 9, 2026
CVE-2026-75650CVSS 10.0
Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that...
Admin intelCISA KEV📅 Added to KEV: Sep 8, 2026📅 Updated: Sep 8, 2026
CVE-2026-81963CVSS 7.8
Improper link resolution before file access ('link following') in Windows Update Stack allows an authorized attacker to elevate...
CISA KEV📅 Added to KEV: Sep 8, 2026
CVE-2026-85880CVSS 7.8
Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CISA KEV📅 Added to KEV: Sep 8, 2026
CVE-2026-86218CVSS 10.0
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
Admin intelCISA KEV📅 Added to KEV: Sep 8, 2026📅 Updated: Sep 7, 2026
CVE-2026-67278CVSS 6.3
MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust store includes an e=3 root...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67279CVSS 6.9
RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing...
Admin intel📅 Updated: Sep 7, 2026
CVE-2026-67281CVSS 8.7
RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a...
Admin intel📅 Updated: Sep 7, 2026

Critical Alert 4 Active Exploits Detected Today

🔐 Access to This Vulnerability Report Requires Support

Get Zero-Hour Vulnerability Alerts

Do Son

Leave a Reply Cancel reply