CVE-2018-10700

CVE-2018-10700 affects Moxa AWK-3121 (version 1.19). The vulnerability arises in the web interface via the POST parameter iw_board_deviceName, allowing an attacker to inject a payload and execute cross-site scripting (XSS). The issue is tied to an input handling flaw in the device name change fun...

PT-2019-8767

Name of the Vulnerable Software and Affected Versions Moxa AWK-3121 version 1.19 Description An issue was discovered that allows an attacker to execute XSS by injecting an XSS payload through the iw board deviceName parameter in the device name change functionality. This affects the ability of an...

CVE-2016-7469

A stored cross-site scripting XSS vulnerability in the Configuration utility device name change page in BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, PSM, WebAccelerator, WOM and WebSafe version 12.0.0 - 12.1.2, 11.4.0 - 11.6.1, and 11.2.1 allows an...

PT-2017-9194

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.2.1, 11.4.0 through 11.6.1, 12.0.0 through 12.1.2 Description A stored cross-site scripting XSS issue exists in the Configuration utility device name change page. This allows an authenticated user with Resource...