The vulnerability of the web interface of the microprogramming software for industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software for wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C models, allows a perpetrator to execute arbitrary commands.

The vulnerability of the web interface of microprogramming software for industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as of microprogramming software for wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A,...

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C models, is related to improper verification of the cryptographic signature. This vulnerability allows attackers to perform cross-site scripting attacks.

The vulnerability of the microprogramming software used in industrial LTE modems of the Moxa OnCell G3150A-LTE, OnCell G3470A-LTE, and WDR-3124A series, as well as the microprogramming software used in wireless access points for industrial systems of the Moxa AWK-3131A, AWK-4131A, AWK-1131A, and...

The vulnerability of the web interface of microprogramming software for wireless access points in Moxa’s industrial systems, such as Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the microprogramming software for wireless access points like Moxa TAP-323 and Moxa TAP-213, allows a hacker to perform cross-site scripting attacks.

The vulnerability of the web interface of Moxa wireless access points for industrial systems, namely Moxa AWK-3131A, AWK-4131A, AWK-1131A, and AWK-1137C, as well as the wireless access points with Moxa TAP-323 and Moxa TAP-213, stems from the lack of protective measures for the web page structure...

Moxa AWK-3131A Cross-Site Scripting (CVE-2016-8719)

A cross-site scripting vulnerability exists in Moxa AWK-3131A. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems allows a intruder to disclose protected information.

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems is related to the use of pre-installed registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...

The vulnerability of the diagnostic script of the microprogramming software for wireless access points in industrial systems, Moxa AWK-3131A, allows a intruder to execute arbitrary commands.

The vulnerability of the diagnostic script of the microprogramming software for wireless access points in Moxa AWK-3131A systems exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a malicious acto...

The vulnerabilities of the iw_troubleshoot, iw_onekey, and iw_webs components of the wireless access point software for Moxa AWK-3131A industrial systems allow attackers to create their own diagnostic scenarios.

The vulnerability of the iwtroubleshoot, iwonekey, and iwwebs components of the wireless access point software for Moxa AWK-3131A industrial systems is related to the use of pre-installed registration data. Exploiting this vulnerability could allow attackers to create their own diagnostic scenari...

The vulnerability of the iw_webs component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to gain full control over the device.

The vulnerability of the iwwebs component in the wireless access point software for Moxa AWK-3131A industrial systems exists due to the lack of measures taken to neutralize the special elements used in the operating system. Exploiting this vulnerability can allow a malicious actor to gain full...

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3131A industrial systems arises from errors in updating the “Device Name” (the hostname). This allows a hacker to gain full control over the device.

The wireless access point software for Moxa AWK-3131A industrial systems is vulnerable to errors when modifying the “Device Name” host name. Exploiting this vulnerability can allow a malicious actor to gain full control over the device remotely...

The vulnerability of the ServiceAgent component of the wireless access point software for Moxa AWK-3131A industrial systems allows a intruder to trigger a service failure.

The vulnerability of the ServiceAgent component in the wireless access point software for Moxa AWK-3131A industrial systems is related to a numerical overflow that causes an overflow of the stack-based buffer. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

The vulnerability of the iw_webs component in the wireless access point software for Moxa AWK-3131A industrial systems allows a hacker to execute arbitrary code.

The vulnerability of the iwwebs component in the wireless access point software for Moxa AWK-3131A industrial systems is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability in the settings of the iw_webs account of the Moxa AWK-3131A wireless access point’s microprogramming software allows a hacker to reset the user’s password for that account.

The vulnerability in the settings of the iwwebs account of the Moxa AWK-3131A wireless access point software-related microprogramming system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to remotely reset the user account password...

The vulnerability of the microprogramming software in wireless access points for Moxa AWK-3131A industrial systems, related to hostname processing errors, allows attackers to escalate their privileges.

The vulnerability of the microprogrammed software in the wireless access point of Moxa AWK-3131A industrial systems is related to name handling errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges by sending specially crafted SNMP requests...

Moxa AWK-3131A Series Industrial AP/Bridge/Client

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low skill level is needed to exploit/public exploits are available Vendor: Moxa Equipment: Moxa AWK-3131A Vulnerabilities: Improper Access Control, Use of Hard-coded Cryptographic Key, OS Command Injection, Use of Hard-coded...

Moxa AWK-3131A Trust Management Issues Vulnerability

Moxa AWK-3131A is a wireless switch from Moxa. A trust management issue vulnerability exists in multiple iw utilities in the Moxa AWK-3131A using firmware version 1.13. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An attacker c...

Moxa AWK-3131A iw_console privilege escalation vulnerability

Added: 02/27/2020 CVE: CVE-2019-5136 Background Moxa AWK-3131A is a 3-in-1 industrial wireless AP/bridge/client device. Problem A privilege escalation vulnerability exists in the iwconsole functionality where a specially crafted menu selection string can cause an escape from the restricted consol...

Moxa AWK-3131A iw_console privilege escalation vulnerability

Added: 02/27/2020 CVE: CVE-2019-5136 Background Moxa AWK-3131A is a 3-in-1 industrial wireless AP/bridge/client device. Problem A privilege escalation vulnerability exists in the iwconsole functionality where a specially crafted menu selection string can cause an escape from the restricted consol...

Moxa AWK-3131A iw_console privilege escalation vulnerability

Added: 02/27/2020 CVE: CVE-2019-5136 Background Moxa AWK-3131A is a 3-in-1 industrial wireless AP/bridge/client device. Problem A privilege escalation vulnerability exists in the iwconsole functionality where a specially crafted menu selection string can cause an escape from the restricted consol...

CVE-2019-5162

An exploitable improper access control vulnerability exists in the iwwebs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as...

CVE-2019-5162

An exploitable improper access control vulnerability exists in the iwwebs account settings functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause the overwrite of an existing user account password, resulting in remote shell access to the device as...