Lucene search
PRIOn knowledge basePRION:CVE-2019-5143HistoryFeb 25, 2020 - 4:15 p.m.
Format string
2020-02-2516:15:00
PRIOn knowledge base
www.prio-n.com
5
An exploitable format string vulnerability exists in the iw_console conio_writestr functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted time server entry can cause an overflow of the time server buffer, resulting in remote code execution. An attacker can send commands while authenticated as a low privilege user to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| awk-3131a_firmware | eq | 1.13 |
Related
cve
cve
CVE-2019-5143
2020-02-25 16:15:10
cvelist
cvelist
CVE-2019-5143
2020-02-25 15:58:23
nvd
nvd
CVE-2019-5143
2020-02-25 16:15:10
talos
talos
Moxa AWK-3131A iw_console conio_writestr Remote Code Execution Vulnerability
2020-02-24 00:00:00
nessus
nessus
talosblog
talosblog
Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWK-3131A
2020-02-24 07:04:47
ics
ics
Moxa AWK-3131A Series Industrial AP/Bridge/Client
2020-03-03 12:00:00