CVE-2024-12297
CWE-656Published: January 15, 2025· Updated: Jun 17, 2026
Official Description
Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.
Technical Analysis
CVE-2024-12297 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.
The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.
CVSS v3.1 Vector Breakdown
Exploit & PoC Resources
All References (2)
Quick Facts
Related CVEs (CWE-656)
Recommended Actions
- →Apply vendor patches immediately
- →Monitor CVE-2024-12297 in threat intel feeds
- →Review IDS/IPS signatures for exploitation attempts