Moxa AWK-3131A Series Industrial AP/Bridge/Client
Successful exploitation of these vulnerabilities could allow an attacker to gain control of the device and remotely execute arbitrary code.
beschreibt (12)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-5165US | high7.2OT erhöht | — | ||
An exploitable authentication bypass vulnerability exists in the hostname processing of the Moxa AWK-3131A firmware version 1.13. A specially configured device hostname can cause t… | ||||
| CVE-2019-5162US | high8.8 | — | ||
An exploitable improper access control vulnerability exists in the iw_webs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name… | ||||
| CVE-2019-5153US | high8.8 | — | ||
An exploitable remote code execution vulnerability exists in the iw_webs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user n… | ||||
| CVE-2019-5148US | high7.5 | — | ||
An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer un… | ||||
| CVE-2019-5143US | high8.8 | — | ||
An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry… | ||||
| CVE-2019-5142US | high7.2 | — | ||
An exploitable command injection vulnerability exists in the hostname functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted entry to network configuration… | ||||
| CVE-2019-5141US | high8.8 | — | ||
An exploitable command injection vulnerability exists in the iw_webs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted iw_serverip parameter can cause… | ||||
| CVE-2019-5140US | high8.8 | — | ||
An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file name can c… | ||||
| CVE-2019-5139US | high7.1OT erhöht | — | ||
An exploitable use of hard-coded credentials vulnerability exists in multiple iw_* utilities of the Moxa AWK-3131A firmware version 1.13. The device operating system contains an un… | ||||
| CVE-2019-5138US | critical9.9 | — | ||
An exploitable command injection vulnerability exists in encrypted diagnostic script functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic scrip… | ||||
| CVE-2019-5137US | high7.5OT erhöht | — | ||
The usage of hard-coded cryptographic keys within the ServiceAgent binary allows for the decryption of captured traffic across the network from or to the Moxa AWK-3131A firmware ve… | ||||
| CVE-2019-5136US | high8.8 | — | ||
An exploitable privilege escalation vulnerability exists in the iw_console functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted menu selection string can… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities - MitigationMoxa AWK-3131A
Moxa has created a security patch to mitigate these vulnerabilities. Please contact Moxa technical support to obtain it. For additional information see the Moxa advisory.
https://www.moxa.com/en/support/support/security-advisory/awk-3131a-series-industrial-ap-bridge-client-vulnerabilities
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan