Moxa AWK-3131A Series Industrial AP/Bridge/Client

🗓️ 03 Mar 2020 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 74 Views

Moxa AWK-3131A Series Industrial AP/Bridge/Client with multiple critical vulnerabilities enabling remote code execution and unauthorized access

Reporter	Title	Published	Views	Family All 133
BDU FSTEC	The vulnerability of the iw_console component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to elevate their privileges to the root level.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems allows a intruder to disclose protected information.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the diagnostic script of the microprogramming software for wireless access points in industrial systems, Moxa AWK-3131A, allows a intruder to execute arbitrary commands.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the iw_troubleshoot, iw_onekey, and iw_webs components of the wireless access point software for Moxa AWK-3131A industrial systems allow attackers to create their own diagnostic scenarios.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iwwebs microprogramming software component in the wireless access point for Moxa AWK-3131A industrial systems allows a intruder to gain full control over the device.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iw_webs component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to gain full control over the device.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3131A industrial systems arises from errors in updating the “Device Name” (the hostname). This allows a hacker to gain full control over the device.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iw_console conio_writestr component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to execute arbitrary code.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems allows a intruder to trigger a service failure.	12 Mar 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the iw_webs component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to execute arbitrary code.	12 Mar 202000:00	–	bdu_fstec

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2020/icsa-20-063-04.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-20-063-04
us-cert	www.us-cert.gov/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
us-cert	www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B

03 Mar 2020 00:00Current

9.5High risk

Vulners AI Score9.5

CVSS 3.19.9

CVSS 29

CVSS 39.9

EPSS0.05478