EUVD-2018-2761

Malware in sbrugna...

EUVD-2018-2762

Malware in sbrugna...

EUVD-2018-2768

Malware in sbrugna...

EUVD-2018-2774

Malware in sbrugna...

EUVD-2018-2767

Malware in sbrugna...

EUVD-2018-2770

Malware in sbrugna...

EUVD-2018-2766

Malware in sbrugna...

EUVD-2018-2771

Malware in sbrugna...

EUVD-2018-2765

Malware in sbrugna...

EUVD-2018-2772

Malware in sbrugna...

EUVD-2018-2763

Malware in sbrugna...

EUVD-2018-2769

Malware in sbrugna...

EUVD-2018-2764

Malware in sbrugna...

EUVD-2018-2773

Malware in sbrugna...

Moxa AWK-3121 Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2018-10695)

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. However, the same functionality allows an attacker to execute commands on the device. The POST...

Moxa AWK-3121 Improper Neutralization of Input During Web Page Generation (CVE-2018-10700)

An issue was discovered on Moxa AWK-3121 1.19 devices. It provides functionality so that an administrator can change the name of the device. However, the same functionality allows an attacker to execute XSS by injecting an XSS payload. The POST parameter iwboarddeviceName is susceptible to this...

Moxa AWK-3121 Improper Restriction of Operations Within the Bounds of a Memory Buffer (CVE-2018-10693)

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter srvName is...

Moxa AWK-3121 Cleartext Transmission of Sensitive Information (CVE-2018-10698)

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET...

Moxa AWK-3121 Improper Access Control (CVE-2018-10691)

An issue was discovered on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log the system log. However, the same functionality allows an attacker to download the file without any authentication or authorization. This plugin only works with Tenable.ot. Plea...

Moxa AWK-3121 Improper Neutralization of Special Elements Used in a Command (CVE-2018-10697)

An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST paramet...