Moxa AWK-3121
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information, cause availability issues, and execute remote code.
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-10703US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the sam… | ||||
| CVE-2018-10702US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the sam… | ||||
| CVE-2018-10701US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the sam… | ||||
| CVE-2018-10700US | medium6.1 | — | ||
An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows… | ||||
| CVE-2018-10699US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certificate file used for conn… | ||||
| CVE-2018-10698US | critical9.8OT elevated | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM positi… | ||||
| CVE-2018-10697US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is work… | ||||
| CVE-2018-10696US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected… | ||||
| CVE-2018-10695US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the dev… | ||||
| CVE-2018-10694US | high8.1OT elevated | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default. An administrator wh… | ||||
| CVE-2018-10693US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly.… | ||||
| CVE-2018-10692US | medium6.1 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site… | ||||
| CVE-2018-10691US | high7.5 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, the same functionality allows an… | ||||
| CVE-2018-10690US | high8.1OT elevated | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web… | ||||
references
External citations — patches, advisories, analysis.
remediations (14)
- MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan