Lucene search
+L

890 matches found

BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•12 views

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3121 lies in the fact that the execution of certain operations goes beyond the buffer in memory. This allows a malicious user to execute arbitrary commands with root privileges.

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3121 lies in the fact that the operation data is stored outside of the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges, using a speciall...

10CVSS8.2AI score0.02605EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/17 12:00 a.m.•13 views

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3121 lies in insufficient validation of arguments passed in commands, allowing attackers to execute arbitrary commands with root privileges.

The vulnerability of the microprogrammed wireless access point software for Moxa AWK-3121 lies in insufficient verification of the arguments passed in the command. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges, using a specially crafted...

10CVSS8AI score0.05395EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2019/06/12 12:00 a.m.•15 views

Moxa AWK-3121 Information Disclosure Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. An information disclosure vulnerability exists in Moxa AWK-3121 version 1.14. An attacker can exploit this vulnerability by sniffing traffic to obtain sensitive information...

8.1CVSS6.2AI score0.01468EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/12 12:00 a.m.•17 views

Moxa AWK-3121 Encryption Issues Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. An encryption issue vulnerability exists in Moxa AWK-3121 version 1.14. The vulnerability stems from the network system or product not properly using the relevant cryptographic algorithms, resulting in content not...

8.1CVSS6.9AI score0.00811EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/12 12:00 a.m.•12 views

Moxa AWK-3121 Access Control Error Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. An access control error vulnerability exists in the Moxa AWK-3121 version 1.14. The vulnerability arises from a network system or product that does not properly restrict access to resources from unauthorized roles...

7.5CVSS7AI score0.02432EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•14 views

Moxa AWK-3121 Command Injection Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A command injection vulnerability exists in the 'iwfilename' parameter in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to execute an illegal command...

8.8CVSS7.9AI score0.05395EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•22 views

Moxa AWK-3121 Buffer Overflow Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A buffer overflow vulnerability exists in the 'iwserverip' parameter in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to cause, for example, a buffer overflow or heap overflow...

8.8CVSS7.4AI score0.02605EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•12 views

Moxa AWK-3121 Buffer Overflow Vulnerability (CNVD-2019-17001)

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A buffer overflow vulnerability exists in the 'srvName' parameter in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to cause, for example, a buffer overflow or heap overflow...

8.8CVSS7.4AI score0.02605EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•15 views

Moxa AWK-3121 Cross-Site Request Forgery Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A cross-site request forgery vulnerability exists in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to send an unintended request to a server via an affected client...

8.8CVSS6.9AI score0.01113EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•19 views

Moxa AWK-3121 Cross-Site Scripting Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A cross-site scripting vulnerability exists in the 'iwboarddeviceName' parameter in the Moxa AWK-3121 version 1.19, which can be exploited by an attacker to execute client-side code...

6.1CVSS6.5AI score0.38324EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•18 views

Moxa AWK-3121 Buffer Overflow Vulnerability (CNVD-2019-17002)

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A buffer overflow vulnerability exists in Moxa AWK-3121 version 1.14, which can be exploited by an attacker to cause a buffer overflow or heap overflow, among others...

8.8CVSS7.3AI score0.03396EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•16 views

Moxa AWK-3121 Parameter Injection Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A parameter injection vulnerability exists in the 'iwprivatePass' parameter in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to execute illegal commands...

8.8CVSS7.6AI score0.01955EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•13 views

Moxa AWK-3121 Information Disclosure Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. An information disclosure vulnerability exists in the Moxa AWK-3121 version 1.14, which can be exploited by unauthorized attackers to obtain sensitive information about an affected component...

6.1CVSS6.2AI score0.01295EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•14 views

Moxa AWK-3121 Buffer Overflow Vulnerability (CNVD-2019-17008)

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A buffer overflow vulnerability exists in the 'iwfilename' parameter in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to cause, for example, a buffer overflow or heap overflow...

8.8CVSS7.4AI score0.02627EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•15 views

Moxa AWK-3121 Command Injection Vulnerability (CNVD-2019-17004)

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A command injection vulnerability exists in the 'srvName' parameter in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to execute illegal commands...

9.3CVSS7.9AI score0.03706EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/10 12:00 a.m.•16 views

Moxa AWK-3121 Trust Management Issues Vulnerability

Moxa AWK-3121 is an industrial-grade wireless access point from Moxa Taiwan, China. A trust management issue vulnerability exists in the Moxa AWK-3121 version 1.14, which can be exploited by an attacker to attack the affected component with a default password or hard-coded passwords and hard-code...

10CVSS7AI score0.02338EPSS
SaveExploits1References1
OSV
OSV
•added 2019/06/07 8:29 p.m.•9 views

CVE-2018-10698

An issue was discovered on Moxa AWK-3121 1.14 devices. The device enables an unencrypted TELNET service by default. This allows an attacker who has been able to gain an MITM position to easily sniff the traffic between the device and the user. Also an attacker can easily connect to the TELNET...

9.8CVSS5.8AI score
SaveExploits0References3
Prion
Prion
•added 2019/06/07 8:29 p.m.•33 views

Buffer overflow

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. However, the same functionality allows an attacker to execute commands on the device. The POST...

6.8CVSS9.2AI score0.03396EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2019/06/07 8:29 p.m.•26 views

Buffer overflow

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "srvName" is...

6.8CVSS9.2AI score0.02605EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2019/06/07 8:29 p.m.•21 views

Command injection

An issue was discovered on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an attacker to execute commands on the device. The POST parameter "iwfilename" is susceptible ...

6.8CVSS9.4AI score0.05395EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder