awk-3121_firmware vulnerabilities and exploits

(subscribe to this query)

8.1

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. The device by default allows HTTP traffic thus providing an insecure communication mechanism for a user connecting to the web server. This allows an malicious user to sniff the traffic easily and allows an malicious user to compromis...

Moxa Awk-3121 Firmware 1.14

7.5

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. It is intended that an administrator can download /systemlog.log (the system log). However, the same functionality allows an malicious user to download the file without any authentication or authorization.

Moxa Awk-3121 Firmware 1.14

6.1

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. The session cookie "Password508" does not have an HttpOnly flag. This allows an attacker who is able to execute a cross-site scripting attack to steal the cookie very easily.

Moxa Awk-3121 Firmware 1.14

8.8

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. It provides ping functionality so that an administrator can execute ICMP calls to check if the network is working correctly. However, the same functionality allows an malicious user to execute commands on the device. The POST paramet...

Moxa Awk-3121 Firmware 1.14

8.8

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. The device provides a web interface to allow an administrator to manage the device. However, this interface is not protected against CSRF attacks, which allows an malicious user to trick an administrator into executing actions withou...

Moxa Awk-3121 Firmware 1.14

8.8

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an malicious user to execute commands on the device. The POST parameter "iw_file...

Moxa Awk-3121 Firmware 1.14

8.8

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. It provides functionality so that an administrator can run scripts on the device to troubleshoot any issues. However, the same functionality allows an malicious user to execute commands on the device. The POST parameter "iw_file...

Moxa Awk-3121 Firmware 1.14

8.8

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certificate file used for connecting to the wireless network. However, the same functionality allows an malicious user to execute commands...

Moxa Awk-3121 Firmware 1.14

8.8

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. It provides alert functionality so that an administrator can send emails to his/her account when there are changes to the device's network. However, the same functionality allows an malicious user to execute commands on the devi...

Moxa Awk-3121 Firmware 1.14

8.1

CVSSv3

An issue exists on Moxa AWK-3121 1.14 devices. The device provides a Wi-Fi connection that is open and does not use any encryption mechanism by default. An administrator who uses the open wireless connection to set up the device can allow an malicious user to sniff the traffic pa...

Moxa Awk-3121 Firmware 1.14

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook