PT-2017-9755 · Moxa · Moxa Awk-3131A Wireless Ap
CVE-2016-8712
·
Publicado
2017-04-13
·
Atualizado
2022-12-14
CVSS v3.1
8.1
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Moxa AWK-3131A Wireless AP version 1.1
Description
An exploitable nonce reuse vulnerability exists in the Web Application functionality. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds.
Recommendations
For Moxa AWK-3131A Wireless AP version 1.1, consider restricting access to the web application functionality until a fix is available, as a temporary workaround to minimize the risk of exploitation.
Exploit
Correção
Insufficient Session Expiration
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Moxa Awk-3131A Wireless Ap