PT-2017-9763 · Moxa · Moxa Awk-3131A Wireless Access Point

Published 2017-04-20 · Updated 2022-12-13 · CVE-2016-8721

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Moxa AWK-3131A Wireless Access Points version 1.1

Description An exploitable OS Command Injection issue exists in the web application 'ping' functionality. Specially crafted web form input can cause an OS Command Injection, resulting in complete compromise of the vulnerable device. This can be exploited remotely.

Recommendations For Moxa AWK-3131A Wireless Access Points version 1.1, consider disabling the 'ping' functionality in the web application until a patch is available to prevent OS Command Injection attacks. Restrict access to the web application to minimize the risk of exploitation.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2016-8721

Affected Products

Moxa Awk-3131A Wireless Access Point

References · 4

• 🔥 http://talosintelligence.com/reports/TALOS-2016-0235 · Exploit
• https://osv.dev/vulnerability/CVE-2016-8721 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-8721 · Security Note
• https://t.me/cvenotify/39763 · Telegram Post