CVE-2019-5136

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A firmware version 1.13

Description A privilege escalation issue exists in the iw console functionality, allowing an attacker to escape the restricted console and gain system access as the root user. This can be triggered by sending specially crafted commands while authenticated as a low-privilege user. The vulnerability is related to inadequate access control in the iw console component.

Recommendations For Moxa AWK-3131A firmware version 1.13, consider restricting access to the iw console functionality until a patch is available. As a temporary workaround, limit the use of the console to minimize the risk of exploitation.