Moxa AWK-3121
Successful exploitation of these vulnerabilities could allow an attacker to view sensitive information, cause availability issues, and execute remote code.
beschreibt (14)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-10703US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the sam… | ||||
| CVE-2018-10702US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the sam… | ||||
| CVE-2018-10701US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the sam… | ||||
| CVE-2018-10700US | medium6.1 | — | ||
An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows… | ||||
| CVE-2018-10699US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certificate file used for conn… | ||||
| CVE-2018-10698US | critical9.8OT erhöht | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM positi… | ||||
| CVE-2018-10697US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is work… | ||||
| CVE-2018-10696US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected… | ||||
| CVE-2018-10695US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the dev… | ||||
| CVE-2018-10694US | high8.1OT erhöht | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default. An administrator wh… | ||||
| CVE-2018-10693US | high8.8 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly.… | ||||
| CVE-2018-10692US | medium6.1 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site… | ||||
| CVE-2018-10691US | high7.5 | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, the same functionality allows an… | ||||
| CVE-2018-10690US | high8.1OT erhöht | — | ||
An issue was discovered on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (14)
- MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series - MitigationAWK-3121
Moxa notes this device has reached end of life and has been replaced by model AWK-1131A (see Moxa bulletin). Moxa recommends users apply the latest security patch, which can be obtained by contacting customer service at the following link:
https://www.moxa.com/en/products/phased-out-products/awk-3121-series
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan