CVE-2017-14030

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An issue was discovered in Moxa MXview v2.8 and prior. The unquoted service path escalation vulnerability could allow an authorized user with file access to escalate privileges by inserting arbitrary code into the unquoted service path.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-428

Affected software

No affected versions have been published.

Timeline

Published: Jan 12, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-140317.8An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to re CVE-2017-140328.1ARM mbed TLS before 1.3.21 and 2.x before 2.1.9, if optional authentication is configured, allows remote attackers to bypass peer authentica CVE-2017-140337.5The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows attackers to cause a CVE-2017-140348.8The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, miscalculates a memcpy destinati CVE-2017-140359.8CrushFTP 8.x before 8.2.0 has a serialization vulnerability.CVE-2017-140366.1CrushFTP before 7.8.0 and 8.x before 8.2.0 has XSS.CVE-2017-140376.1CrushFTP before 7.8.0 and 8.x before 8.2.0 has an HTTP header vulnerability.CVE-2017-140386.1CrushFTP before 7.8.0 and 8.x before 8.2.0 has a redirect vulnerability.CVE-2017-140398.8A heap-based buffer overflow was discovered in the opj_t2_encode_packet function in lib/openjp2/t2.c in OpenJPEG 2.2.0. The vulnerability ca CVE-2017-140408.8An invalid write access was discovered in bin/jp2/convert.c in OpenJPEG 2.2.0, triggering a crash in the tgatoimage function. The vulnerabil CVE-2017-140418.8A stack-based buffer overflow was discovered in the pgxtoimage function in bin/jp2/convert.c in OpenJPEG 2.2.0. The vulnerability causes an CVE-2017-140426.5A memory allocation failure was discovered in the ReadPNMImage function in coders/pnm.c in GraphicsMagick 1.3.26. The vulnerability causes a