CVE-2016-8720

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A Wireless Access Point version 1.1

Description An exploitable HTTP Header Injection issue exists in the Web Application functionality. A specially crafted HTTP request can inject a payload in the bkpath parameter, which will be copied into the Location header of the HTTP response.

Recommendations For Moxa AWK-3131A Wireless Access Point version 1.1, consider restricting access to the Web Application functionality until a fix is available. As a temporary workaround, avoid using the bkpath parameter in HTTP requests to minimize the risk of exploitation.