Moxa AWK-3131A Series Industrial AP/Bridge/Client Stack-Based Buffer Overflow (CVE-2019-5153)

An exploitable remote code execution vulnerability exists in the iwwebs configuration parsing functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted user name entry can cause an overflow of an error message buffer, resulting in remote code execution. An attacker can send...

CVE-2019-5153

The CVE-2019-5153 issue affects Moxa AWK-3131A firmware 1.13 in the iw_webs configuration parsing, where a crafted username can overflow an error-buffer and enable remote code execution. The vulnerability requires authentication as a low-privilege user and results in full device compromise per Ta...