An issue exists on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides certfile upload functionality so that an administrator can upload a certificate file used for connecting to the wireless network. However, the same functionality allows an malicious user to execute commands on the device. The POST parameter "iw_privatePass" is susceptible to this injection. By crafting a packet that contains shell metacharacters, it is possible for an malicious user to execute the attack.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
moxa awk-3121_firmware 1.14 |
Vulmon