PT-2017-9755 · Moxa · Moxa Awk-3131A Wireless Ap

Published 2017-04-13 · Updated 2022-12-14 · CVE-2016-8712

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A Wireless AP version 1.1

Description An exploitable nonce reuse vulnerability exists in the Web Application functionality. The device uses one nonce for all session authentication requests and only changes the nonce if the web application has been idle for 300 seconds.

Recommendations For Moxa AWK-3131A Wireless AP version 1.1, consider restricting access to the web application functionality until a fix is available, as a temporary workaround to minimize the risk of exploitation.

Exploit

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2016-8712

Affected Products

Moxa Awk-3131A Wireless Ap

References · 4

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0225 · Exploit
• https://osv.dev/vulnerability/CVE-2016-8712 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8712 · Security Note
• https://t.me/cvenotify/39796 · Telegram Post