PT-2017-9760 · Moxa · Moxa Awk-3131A Wireless Access Point
CVE-2016-8718
·
Publicado
2017-04-12
·
Atualizado
2022-12-13
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Moxa AWK-3131A Wireless Access Point version 1.1
Description
A Cross-Site Request Forgery issue exists in the Web Application functionality. It allows a specially crafted form to trick a client into making an unintentional request to the web server, which will be treated as an authentic request.
Recommendations
For Moxa AWK-3131A Wireless Access Point version 1.1, consider disabling access to the web server or restricting the use of the Web Application functionality until a patch is available.
Exploit
Correção
CSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Moxa Awk-3131A Wireless Access Point