PT-2019-8764 · Moxa · Moxa Awk-3121

Samuel Huntley · Publicado 2019-06-07 · Atualizado 2023-02-28 · CVE-2018-10697

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Moxa AWK-3121 version 1.14

Description An issue was discovered in the Moxa AWK-3121 device, where the ping functionality, intended for administrators to check network connectivity via ICMP calls, can be exploited by an attacker to execute commands on the device. The srvName parameter in a POST request is susceptible to injection. By crafting a packet with shell metacharacters, an attacker can execute this attack.

Recommendations For Moxa AWK-3121 version 1.14, consider disabling the ping functionality or restricting access to the srvName parameter in the POST request to minimize the risk of exploitation. Avoid using the srvName parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2018-10697

Produtos afetados

Moxa Awk-3121

Referências · 6

• 🔥 https://github.com/samuelhuntley/Moxa_AWK_1121/blob/master/Moxa_AWK_1121 · Exploit
• 🔥 http://packetstormsecurity.com/files/153223/Moxa-AWK-3121-1.14-Information-Disclosure-Command-Execution.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-10697 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-10697 · Nota de Segurança
• https://seclists.org/bugtraq/2019/Jun/8 · Nota
• https://t.me/cibsecurity/4785 · Publicação no Telegram