An exploitable OS Command Injection vulnerability exists in the web application 'ping' functionality of Moxa AWK-3131A Wireless Access Points running firmware 1.1. Specially crafted web form input can cause an OS Command Injection resulting in complete compromise of the vulnerable device. An attacker can exploit this vulnerability remotely.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HMoxa Awk 3131a
HWMoxaall versionsMoxa Awk 3131a Firmware
OSMoxa1.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
Related vulnerabilities
CVE-2019-5138CRITICAL9.9PL ✓same product
Command injection w funkcji diagnostycznej Moxa AWK-3131A
CVE-2017-14459CRITICAL10.0PL ✓same product
Command Injection w Moxa AWK-3131A — zdalne wykonanie poleceń jako root
CVE-2016-8717CRITICAL9.8PL ✓same product
Moxa AWK-3131A — zakodowane na stałe dane logowania konta root
CVE-2016-8363CRITICAL10.0PL ✓same product
Moxa — wykonanie dowolnych poleceń OS na urządzeniach sieciowych (RCE)
CVE-2019-5136HIGH8.8same product
An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A...