CVE-2016-8719

🗓️ 12 Apr 2017 19:00:00Reported by talosType

cve🔗 web.nvd.nist.gov👁 60 Views🌐 WEB

An exploitable Cross-Site Scripting vulnerability in Moxa AWK-3131A Wireless Access Poin

Reporter	Title	Published	Views	Family All 11
CNVD	Moxa AWK-3131A Wireless Access Point Cross-Site Scripting Vulnerability	19 May 201700:00	–	cnvd
Check Point Advisories	Moxa AWK-3131A Cross-Site Scripting (CVE-2016-8719)	2 Dec 202000:00	–	checkpoint_advisories
Cvelist	CVE-2016-8719	12 Apr 201719:00	–	cvelist
EUVD	EUVD-2016-9558	7 Oct 202500:30	–	euvd
NVD	CVE-2016-8719	12 Apr 201719:59	–	nvd
OSV	CVE-2016-8719	12 Apr 201719:59	–	osv
Prion	Cross site scripting	12 Apr 201719:59	–	prion
Positive Technologies	PT-2017-9761 · Moxa · Moxa Awk-3131A Wireless Access Point	12 Apr 201700:00	–	ptsecurity
seebug.org	Moxa AWK-3131A Web Application Multiple Reflected Cross-Site Scripting Vulnerabilities(CVE-2016-8719)	19 Sep 201700:00	–	seebug
Talos	Moxa AWK-3131A Web Application Multiple Reflected Cross-Site Scripting Vulnerabilities	10 Apr 201700:00	–	talos

NVD

Vulners

Node

moxa awk-3131a_firmwareMatch1.1

AND

moxa awk-3131aMatch-

[
  {
    "product": "AWK-3131A Series Industrial IEEE 802.11a/b/g/n wireless AP/bridge/client",
    "vendor": "Moxa",
    "versions": [
      {
        "status": "affected",
        "version": "1.1"
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/reports/TALOS-2016-0233/

Parameter	Position	Path	Description	CWE
devIndex	query param	multiplessidset.asp	Reflected XSS via devIndex parameter in multiplessidset.asp	CWE-79
index	query param	wireless_cert.asp	Reflected XSS via index parameter in wireless_cert.asp	CWE-79
vapIndex	query param	wireless_security.asp	Reflected XSS via vapIndex parameter in wireless_security.asp	CWE-79
devIndex	query param	clientlist.asp	Reflected XSS via devIndex parameter in clientlist.asp	CWE-79

17 Jun 2026 00:54Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 3.16.1

CVSS 37.5

EPSS0.00823

CWE-79