CVE-2018-10702

CVE-2018-10702 affects Moxa AWK-3121 (version 1.14) and involves a command-injection vulnerability in the device’s script-running functionality. The POST parameter "iw_filename" can be abused to inject shell commands, enabling an attacker to execute commands on the device via this feature. Public...