Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Moxa’s Ethernet switch is vulnerable to an authentication bypass because of flaws in its authorization mechanism. Although both client-side and back-end server verification are involved in the process, attackers can exploit weaknesses in its implementation. These vulnerabilities may enable brute-force attacks to guess valid credentials or MD5 collision attacks to forge authentication hashes, potentially compromising the security of the device.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-05 | 2 | Disclosure1Patch1 |
| 2026-02-06 | 1 | General1 |
@the_yellow_fall You now can see the full detail about this CVE from https://vulntracker.io/cves/CVE-2024-12297 for FREE
Post summary
The post only directs readers to a vulnerability tracker page for CVE‑2024‑12297, offering no additional details on exploitation, patches, or technical specifics.
🚨 Critical Moxa TN-A/TN-G Switch Flaw (CVE-2024-12297) Enables Remote Auth Bypass on Industrial Networks Moxa disclosed a critical authentication weakness in TN-A/TN-G Ethernet switches where frontend/back-end authorization gaps can be abused (e.g., brute-force and signature forgery via weak MD5-based logic) to gain unauthorized access to management interfaces, risking OT network tampering and lateral movement. Apply the vendor firmware updates and restrict management-plane access immediately. 🎯 Target: Global/OT & Industrial Networks #️⃣ Category: #Vulnerability #BlueTeam 🔗 URL: https://cyberpress.org/moxa-switches-vulnerability/
Post summary
Moxa disclosed a critical authentication flaw in its TN‑A/TN‑G switches that allows remote authentication bypass via brute‑force and MD5‑based forgery, and urges immediate firmware updates and network restrictions.
Frontend Authorization Logic Disclosure Vulnerability in Moxa Ethernet Switches URL: https://www.moxa.com/en/support/product-support/security-advisory/mpsa-241409-cve-2024-12297-frontend-authorization-logic-disclosure-vulnerability-in-ethernet-switches Classification: Critical, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 9.2
Post summary
Moxa issued a critical disclosure for CVE‑2024‑12297, providing a CVSS score of 9.2 and an official fix, but no exploitation or PoC information is available.