CVE-2019-5141

An exploitable command injection vulnerability exists in the iwwebs functionality of the Moxa AWK-3131A firmware version 1.13. A specially crafted iwserverip parameter can cause user input to be reflected in a subsequent iwsystem call, resulting in remote control over the device. An attacker can...

Moxa AWK-3131A iw_webs Account Settings Function Access Control Error Vulnerability

Moxa AWK-3131A is a wireless access device from Moxa. An access control error vulnerability exists in the iwwebs account settings feature in the Moxa AWK-3131A using firmware version 1.13. The vulnerability arises from the network system or product not properly restricting access to resources fro...