Lucene search
PRIOn knowledge basePRION:CVE-2019-5140HistoryFeb 25, 2020 - 4:15 p.m.
Command injection
2020-02-2516:15:00
PRIOn knowledge base
www.prio-n.com
8
An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted diagnostic script file name can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| awk-3131a_firmware | eq | 1.13 |
Related
nvd
nvd
CVE-2019-5140
2020-02-25 16:15:10
cvelist
cvelist
CVE-2019-5140
2020-02-25 15:25:49
cve
cve
CVE-2019-5140
2020-02-25 16:15:10
talos
talos
nessus
nessus
talosblog
talosblog
Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWK-3131A
2020-02-24 07:04:47
ics
ics
Moxa AWK-3131A Series Industrial AP/Bridge/Client
2020-03-03 12:00:00