Moxa AWK-3131A Series Industrial AP/Bridge/Client Out-of-Bounds Read (CVE-2019-5148)

An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packe...

CVE-2019-5148

The CVE-2019-5148 issue affects the Moxa AWK-3131A (firmware v1.13) in the ServiceAgent component. A crafted, unauthenticated network packet can trigger an integer underflow that leads to a large memcpy, causing out-of-bounds memory access and a denial-of-service crash. TALOS and Red Hat/CISA ref...

CVE-2019-5148

An exploitable denial-of-service vulnerability exists in ServiceAgent functionality of the Moxa AWK-3131A, firmware version 1.13. A specially crafted packet can cause an integer underflow, triggering a large memcpy that will access unmapped or out-of-bounds memory. An attacker can send this packe...