An exploitable Use of Hard-coded Credentials vulnerability exists in the Moxa AWK-3131A Wireless Access Point running firmware 1.1. The device operating system contains an undocumented, privileged (root) account with hard-coded credentials, giving attackers full control of affected devices.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HMoxa Awk 3131a
HWMoxaall versionsMoxa Awk 3131a Firmware
OSMoxa1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2019-5138CRITICAL9.9PL ✓same product
Command injection w funkcji diagnostycznej Moxa AWK-3131A
CVE-2017-14459CRITICAL10.0PL ✓same product
Command Injection w Moxa AWK-3131A — zdalne wykonanie poleceń jako root
CVE-2016-8721CRITICAL9.1PL ✓same product
Command Injection w funkcji ping aplikacji webowej Moxa AWK-3131A
CVE-2016-8363CRITICAL10.0PL ✓same product
Moxa — wykonanie dowolnych poleceń OS na urządzeniach sieciowych (RCE)
CVE-2019-5136HIGH8.8same product
An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A...