An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HMoxa Awk 1121
HWMoxaall versionsMoxa Awk 1121 Firmware
OSMoxa≤ 06-29-2017Moxa Awk 1127
HWMoxaall versionsMoxa Awk 1127 Firmware
OSMoxa≤ 06-29-2017Moxa Awk 1131a
HWMoxaall versionsMoxa Awk 1131a Firmware
OSMoxa≤ 10-31-2016Moxa Awk 3121 M12 Rtg
HWMoxaall versionsMoxa Awk 3121 M12 Rtg Firmware
OSMoxa≤ 06-29-2017Moxa Awk 3131a
HWMoxaall versionsMoxa Awk 3131a Firmware
OSMoxa≤ 10-31-2016Moxa Awk 3131 M12 Rcc
HWMoxaall versionsMoxa Awk 3131 M12 Rcc Firmware
OSMoxa≤ 06-29-2017Moxa Awk 3191
HWMoxaall versionsMoxa Awk 3191 Firmware
OSMoxa≤ 05-30-2017Moxa Awk 4131a
HWMoxaall versionsMoxa Awk 4131a Firmware
OSMoxa≤ 10-31-2016Moxa Awk 5232
HWMoxaall versionsMoxa Awk 5232 Firmware
OSMoxa≤ 05-30-2017Moxa Awk 5232 M12 Rcc
HWMoxaall versionsMoxa Awk 5232 M12 Rcc Firmware
OSMoxa≤ 06-29-2017Moxa Awk 6232
HWMoxaall versionsMoxa Awk 6232 Firmware
OSMoxa≤ 05-30-2017Moxa Oncellg3470a Lte
HWMoxaall versionsMoxa Oncellg3470a Lte Firmware
OSMoxa≤ 10-31-2016Moxa Wac 1001 V2
HWMoxaall versionsMoxa Wac 1001 V2 Firmware
OSMoxa≤ 06-29-2017Moxa Wac 2004
HWMoxaall versionsMoxa Wac 2004 Firmware
OSMoxa≤ 06-29-2017
Related vulnerabilities
Command injection w funkcji diagnostycznej Moxa AWK-3131A
Command Injection w Moxa AWK-3131A — zdalne wykonanie poleceń jako root
Moxa AWK-3131A — zakodowane na stałe dane logowania konta root
Command Injection w funkcji ping aplikacji webowej Moxa AWK-3131A
Certain MOXA devices allow Authenticated Command Injection via /forms/web_importTFTP. This affects WAC-2004 1....