PT-2017-9763 · Moxa · Moxa Awk-3131A Wireless Access Point
CVE-2016-8721
·
Publicado
2017-04-20
·
Atualizado
2022-12-13
CVSS v3.1
9.1
Crítica
| Vetor | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Moxa AWK-3131A Wireless Access Points version 1.1
Description
An exploitable OS Command Injection issue exists in the web application 'ping' functionality. Specially crafted web form input can cause an OS Command Injection, resulting in complete compromise of the vulnerable device. This can be exploited remotely.
Recommendations
For Moxa AWK-3131A Wireless Access Points version 1.1, consider disabling the 'ping' functionality in the web application until a patch is available to prevent OS Command Injection attacks. Restrict access to the web application to minimize the risk of exploitation.
Exploit
Correção
OS Command Injection
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Moxa Awk-3131A Wireless Access Point