PT-2017-9763 · Moxa · Moxa Awk-3131A Wireless Access Point

CVE-2016-8721

·

Publicado

2017-04-20

·

Atualizado

2022-12-13

CVSS v3.1

9.1

Crítica

VetorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A Wireless Access Points version 1.1
Description An exploitable OS Command Injection issue exists in the web application 'ping' functionality. Specially crafted web form input can cause an OS Command Injection, resulting in complete compromise of the vulnerable device. This can be exploited remotely.
Recommendations For Moxa AWK-3131A Wireless Access Points version 1.1, consider disabling the 'ping' functionality in the web application until a patch is available to prevent OS Command Injection attacks. Restrict access to the web application to minimize the risk of exploitation.

Exploit

Correção

OS Command Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2016-8721

Produtos afetados

Moxa Awk-3131A Wireless Access Point