CVE-2024-12297
CVE-2024-12297 is a critical-severity vulnerability with a CVSS 4.0 base score of 9.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-656.
Key facts
- Severity: Critical (CVSS 4.0 base score 9.2)
- EPSS exploit prediction: 1% (53rd percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2024-50752
- Weakness: CWE-656
- Published:
- Last modified:
Description
Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.
Frequently asked questions
- What is CVE-2024-12297?
- Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.
- How severe is CVE-2024-12297?
- CVE-2024-12297 has a CVSS 4.0 base score of 9.2, rated critical severity.
- Is CVE-2024-12297 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (53rd percentile), an estimate of the probability of exploitation in the next 30 days.
- How do I fix CVE-2024-12297?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- Does CVE-2024-12297 have an EU (EUVD) identifier?
- Yes. CVE-2024-12297 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-50752.
- When was CVE-2024-12297 published?
- CVE-2024-12297 was published on 2025-01-15 and last updated on 2026-06-17.
References
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241407-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-eds-508a-series
- https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241408-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-identified-in-pt-switches
Other CWE-656 vulnerabilities
- CVE-2026-7161 — Critical (CVSS 9.3): An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device…
- CVE-2026-42363 — Critical (CVSS 9.3): An insufficient encryption vulnerability exists in the Device Authentication functionality of GeoVision GV-IP Device…
- CVE-2020-10284 — Critical (CVSS 9.1): No authentication is required to control the robot inside the network, moreso the latest available user manual shows an…
- CVE-2025-59093 — High (CVSS 8.5): Exos 9300 instances are using a randomly generated database password to connect to the configured MSSQL server. The…
- CVE-2024-9138 — High (CVSS 7.2): Moxa’s cellular routers, secure routers, and network security appliances are affected by a high-severity…
- CVE-2020-10277 — Medium (CVSS 6.4): There is no mechanism in place to prevent a bad operator to boot from a live OS image, this can lead to extraction of…